How can I generate a verisign code signing test certificate which chains to the new 2048 bit Verisign Root CA