Build out CertificateAuthority