Add selfsign functionality in cert-gen, also change the option