Hi Ankit,
Please refer the below help page
AFAIK - the key generated from NWA are already self-signed, and if you want to have CA signed then you will send to to CA. Please refer the below page to generate the key from NWA
Creating a Key Pair and Public-Key Certificate and Signing It - System Security - SAP Library
regards,
Harish