Create CertificateGenerator and use it in CA