- Certificate gets created after clicking Next button. - Clicking back informs the users that the CA certificate got already created. - CA certificate should be valid for 5y - Include special markers that allow easy certificate refresh after they expire