Set CA flag for new CA certificates

refs #7247