fork idea
now you change the CA you trust
just run newCA.py