updated with root ca stuff