Turn up default ca key size to 4096, because why not
Add little cert maker thingy