CA certificate authority offline root certificate authority - kept powered down and off-line for security