Change CertificateGenerator to sign correctly by CA