3.3 Certificate Signing Request (CSR) generation