Create a certificate structure that looks like the planned future.

Therefore updated:
- signer to take same default ca
- trustore generation
- privateKeys pkcs12 generatien. (for including the cert chain)
...