diff --git a/bin/cache-certs.sh b/bin/initca.sh
similarity index 100%
rename from bin/cache-certs.sh
rename to bin/initca.sh
diff --git a/initca.nix b/initca.nix
new file mode 100644
index 0000000..4784a7e
--- /dev/null
+++ b/initca.nix
@@ -0,0 +1,5 @@
+with import <nixpkgs> {};
+let
+  pki = pkgs.callPackage ./lib/pki.nix {};
+in
+  pki.initca