Root CA certificate and certificate generation