requesting and issuing a cert (while escrowing the encryption key)