add CERTIFICATE_AUTHORITY setting