Add option to generate certificates from existing CA key/crt pair
Use sha512 for signatures of certificates so Chrome doesn't complain