Add issuing CA certificate