Explicitly mention that the CA key is used to sign certificates