exercise /certificate/sign with a real RSA key

adds 'cryptography' to the dependencies list, for RSA key generation