In https://review.openstack.org/#/c/31374/ the PKI defaults were changed but the example PKI not updated. Update it now. Change-Id: Ie65f27ab586e05a3c43a589499c115b56e734e07
and doc how to install signing certificate from an external CA Change-Id: I92feb8eaeea617211ee7132480ac7a63bf0a1bf1