Tiina makes a key the same way, getting a certificate (Kari-2).
http://www.w3.org/2000/10/swap/doc/
12 of 18