Fix for --subca

--subca accepts three parameters, not two