Creating a private CA can be useful if you have a lot of services encrypting data for internal use but don’t need the domain to be verified by a public CA like Verisign, Thawte etc.
By importing the CA to all computers that will use these services users won’t get the a popup in IE and Firefox saying that the certificate is invalid.