Added CA-side creation of client certificates

Using this is not a good practice, but if CA and client are the
same person, this should not really bother.