Add the ability to generate a key pair and wrap the resulting public key into a self-signed X.509 certificate. The self-signed X.509 certificate can then be used to generate a PKCS #10 certificate signing request.