Create a CSR using transit and Sign the CSR with root CA(Public CA)

Vault
1

Hi All,

I have a use case where i wanted to sign a image and share with clients
Below is the procedure im trying to do, im not getting how to achieve it, please help me how to do this.

a) Create a keypair in transit (say p256)
b) Grab the public key
c) Create a CSR embedding that public key using vault
d) Sign the CSR with public CA

Regards,Anvitha