Create a PKCS#10 certificate signing request (RSA, ECDSA or Ed25519) and its private key, or build one from a key you have. Made on this device; not uploaded.