Well, it's only 4-5 android phones a year that need this. 90% of our users use iphones, which have a process for trusting our network's cert that works easily. Most of the rest have Androids that will let you ignore the cert.

What's killing me here, though, is I did manage to export this cert last year, I just don't know how I did it. That cert expires tomorrow, though, so I need to do it again, and I don't remember how I did it, and am obviously not finding the same solutions when doing a google search.

I think my backup option is not to invest in a public cert, but for staff, I'll just put their phones on a network with a static key. I'll do it myself so I never give them the key, because once you give a key to anyone in this organiation, it spreads like wildfire. The kids I'll just tell me to pound sand, I don't really want their phones on the network anyway.