writing new private key to 'ca.key'