add CA to ssl cert generation
bugfixes in new python-nginx integration