Adding a testing root CA and methods for signing certificate hostnames on the fly.