class Acme::Client::CertificateRequest

def generate
  OpenSSL::X509::Request.new.tap do |csr|
    csr.public_key = @private_key.public_key
    csr.subject = generate_subject
    add_extension(csr)
    csr.sign @private_key, @digest
  end
end