Sign CSRs with their private key

For a CSR to be valid, it must be [signed by the private key that corresponds to the CSR](http://www.redkestrel.co.uk/Articles/CSR.html).

There is a handy tool to validate CSRs here: http://certlogik.com/decoder/

This small patch ensures that the CSR is signed.