Certificate Authority with nginx proxy