Save private key; refactor CSR generation