qca old 
SHA1(qca.cert.der)= 3e16600ff54343717b1cba4718fcd8b831f3f37e
MD5(qca.cert.der)= fa4425d9df5515570d7ba6d5d07bfd3c

rca old
SHA1(rca.cert.der)= 40876a80a41d85dc910a2b7274ae65985ecc411f
MD5(rca.cert.der)= 63f4c41011e51d36706432b41829ef9f