Script to create a 2-tier CA