cert-crypto: generate certificate request