title: Does fabric-ca-server support the generation of key pairs on behalf of the client?
body: <p>From the Fabric CA documentation it is clear that key generation occurs on the client (i.e., fabric-ca-client) side and that the generated public key is sent (together with the CSR) to the CA (i.e., fabric-ca-server) for certification.</p>
  <p>What about the other common PKI use case wherein the client just sends a CSR and has the CA generate both public and private keys returning the certificate of the public key and the private key back to the client?</p>
  <p>Does Fabric CA support this use case? If so, where might I find documentation?</p>