(I'm fairly sure I know the answer, but just in case...)
We want SSL on an internal-use webserver, but the usual ones don't work for the usual reasons (not static IP, subdomain issues etc.).
Server identity is not an issue, all we need is an encrypted connection for the slightly-sensitive data. Management's main worry is wifi-sniffing at a cafe. MITM attacks are not a concern (the data involved isn't worth the effort) but the Big Red Warning Page is an issue - the users are just not capable of understanding the issue and adding an exception. This means no self-signed certificates.