make a fake CA cert by resigning the original one