Certificate request: support for direct use of internal CA

When generating certificate requests, you cannot directly use an internal CA such as with the Lync Deployment tool.

This isn't an issue for public certificates, but for internal certificates (for instance OAuth) this would make my life a bit more pleasant.