Changed default template to reference startssl CA/sub-CA certs