This tool generates two key pairs (primary and alternate) along with a certificate signing request (CSR). The private keys are in PKCS#8 format and DER encoded. The CSR is in PKCS #10 format and DER encoded. Alternate public key and signature data are added as attributes in the CSR. If ML-KEM is selected for the alternate key, the public key is added as an extension request in the CSR. The private keys and CSR are zipped together into a single file for download. Warning: these private keys and CSR should ONLY be used for test and development purposes.