fixed issues with sub authority cert signing. Added documentation