CA.pl -newca and follow prompts

CA.pl -signreq (req from WS/AS needs to be call newreq.pem)

output is newcert.pem, this goes back to WS/AS

needs gcc libs to work