Make it possible to override CN
Copy CA private key to ./result