set empty cert vars on ca create