[wtetzner]

You wouldn't have a signed cert until after the challenge has been completed. The client generated a CSR, not a certificate.