Actually generate an x509 certificate