[CERT] add ca record