pk_sign_cert
rv = pk_sign_cert(handle, &signedCert, &cakey, NULL, &certdata);
rv = pk_sign_cert(handle, &signedCert, &casignkey, NULL,