Better error checking on private key and csr.  Also, pull in file names ...

...instead of pointers.
this always returns `(None, csr_der)` as `key_pem` is not set anywhere in the function.