cert and key nice names. Make host key based on existing CA