Rootca certificate is not private