If permissions allow, the engineer can create new certificates from their own dashboard. They will see the New certificate button if they have the ability to do so.