Generate a self-signed root and a leaf certificate signed by it. The secret is the leaf private key.