pub fn new_ca(hosts: &[String]) -> Result<CaFiles, TlsError>
Make a CA that may sign for hosts (and names under them) alone, valid from yesterday for a year.
hosts