self-contained utility to create CA cert/key and broker cert/key with subjAltName