We also need the sign step to make a proper top level self signed root certificate.