complete the CA and certificate generation script