danieldreier's create_ca gist is now my repo