use Bouncy Castle for CSR generation since Java 7 did away with some
crucial security classes.
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5869