full privCA