Make CertificateAuthority signed certs more signed cert-like