- added a service endpoint to download the CA certificate
- added AKI, SKI and various other extensions to issued certificate
- refactored the startup code, making it shared across modules