pub fn root_cert(ca_cert: &str, ca_keys: &str) -> Result<Certificate>