Update API spec with discussed changes

I have moved the password from the certificate import request into the signature request and updated the p12 example to a valid hex string.