Finalizing basic workflow.  Certificate now can be issued and uploaded to the server

TODO:
- implement denial
- repo publishing