put generated root ca files in ~/.ca
remove unnecessary flag for max-age
remove globals
initial logic to support generating certs using the root
change root ca file names