refactored generate_ca_ks script and add ca-add-cert
fixed read_p12_cert
fixed generate-ca