csr and key generator

empty fields will be omitted

rsa key generation will take several seconds - ec keys are near-instant