Issue a certificate
The root key signs the new certificate with ML-DSA-87 or the legacy ML-DSA-65 parameter set. The certificate appears in the list and in verification results as soon as it is signed.
Certificates issued here live in memory for the lifetime of this demo process. No private key material is generated and nothing is written to disk.