PKI Self-Signing: add a command to create a cert and self-sign it