SelfSignedCertificate#generateCertificate should sign the certificate the configured security provider

Otherwise, content signer will use the default security provider from JDK instead of BC.

Line 106 should add

.setProvider(config.getProvider())