begin to setup a ca
config file for CA
new set of certificates, no without passphrases
another bunch of debugging