crt for easy CA import (e.g. android)