certificate authority servlet extracted from contrail.