add tool for making cert, fix signature utility to work with make-cerrt.py