generate a new certificate signing request