rename rootCA as rootCACert