2 tier CA