Migrate to new Certificate Authority, while another one is in production

http://serverfault.com/questions/276342/adding-new-root-enterprise-ca-without-disturbing-existing-one