Sign CSR, sign new server, sign new client certificate from CA stored on a hardware Token
Add support for ROOT & intermediary CA certificates stored on Tokens: create a new CA inside a Token, load existing CA into a Token, sign CSR files with a CA Token, create & sign new client server certificates with a CA Token