Ignore CA's public cert
clarifying CA' certificate creation process