Set up test CA and valid signed cert by that CA.

Also require valid cert for host 'valid'.