generated certificates now contain random serial and version numbers and the ca cert