<ca-name> must start with a letter and
end with a letter or digit. Interior characters are only
alphabets, digits, minus, underscore and dot. It
should not end as .crt
certificate-id-type
string
<certificate-id> must start with an alphabet and
end with a letter or digit. Interior characters are only
alphabets, digits, minus, underscore and dot. It
should not end as .pem and should not be the keyword 'default'.