simple ca described by http://www.rabbitmq.com/ssl.html
generate new certs