bug 1229: "CA" -> "certificate authority (CA)"