and make sure that private ca key is not deleted at the end of the procedure, so that we could generate additional certificates any time without regenerating everything