Generate a cnf file with patch from SWITCH to control cert content.