How to generate the default CA:

cfssl gencert -initca config/ca-csr.json | cfssljson -bare default-ca