replace keygen Tag for certificate enrollment

[cornelinux]

When enrolling a certificate request and creating the key on the client we used the keygen tag. This did only work in firefox and is now deprecated.

We need to find an alternative using javascript.

This is related to #145