reworked certificate generation, UaExpert still misses revocatio lists etc, but creating a full CA will be to complex ATM