component functions as an internal certificate authority for vpn-1 ngx