Let's use the ca certificate for signing; as we should.