Unlike the original certman module, this package does not create a CA by itself upon installation.
The new CA creation, if needed and wanted, is left to the sysadmin. This can be done via fwconsole or via the web interface. It is sufficient to request the first self-signed certificate. Fortunately, it seems to me that it is created into /etc/asterisk/keys without overwriting anything in /etc/pki (apart from removing the infamous expired DST Root CA X3, which indeed, even in its' correctness, I think should be a sysadmin' task and not a PBX' one).

Please note that this module used to put a command in /var/spool/cron/asterisk to silently update it's certs:
x x * * * /usr/sbin/fwconsole certificates --updateall -q 2>&1 >/dev/null

And it created two values in FreePBX conf settings: CERT_DAYS_VAL and CERT_DAYS_EXPIRATION_ALERT
