A page to enter detail and then a signed certificate (self signed ) is produced,can upload a certificate they have stored, which then gets verified and displayed in browser.
CA is in charge of key generation, can giv a private key
Can use OpenSSL for generating keys/encryption but not for generating certificate. not allowed to use any libraries to generate certificates .
[url removed, login to view] file formatting is not required