Use sha-512 rather than deprecated sha-1; generate a csr