add incommon CA, use common CA file for all servers