fix CA signing issue for generated certs, closes #232