How to bring your own PKI by importing external certificate