Significant cleanup of the code that generates a self-signed certificate. There...

Significant cleanup of the code that generates a self-signed certificate.  There is no need to keep the CSR around so we don't do that anymore.  The remainder of the code contains only what is needed; the rest I had copied from OpenSSL example code 20 years ago and never looked at again.