Certificate.sign

Signs the unsigned Certificate with the specified CA X509 Certificate and it's corresponding public/private keypair.

Once the Certificate is signed, it can no longer be modified.