TL;DNR: I'm an idiot and misread the story thinking the executive sent the ca private key, not the client keys This is even more egregious. Thanks for the clue

TL;DNR: I'm an idiot and misread the story thinking the executive sent the ca private key, not the client keys This is even more egregious. Thanks for the cluebat hit to the face!