Sign the Okta certificate with your own CA