WIP: certificate/pkey generation & PEM export