Copy/paste issue was present, so if following guide you would override client CA key created on step 9 while generating client key for certificate. Change-Id: Icc06b48cfe57929030218555ab4b19b1db1ff68a