- use CA cert and key for SSL cert generation - remove unused parameters - add a few more echo with log output