new backup script, see #11
the SSL CSR must be generated with a country code