attempt to sign CSR