Comment by SchemaLoad

Fairly sure it used to be pretty much a manual process where someone had to actually process your request for a certificate on the other side.