move keys on private directory
copy instead of rename revoked certificates
remove underscrore for ca name