if u r talking about cisco ASR5000 chassis certificate, u can use (ssl-certificate cmd).
for SecGW functionality, Cisco ASR5000 doesn't generate a certificate except for its own ssh server . u have to generate a certificate from any Linux-server/Cisco-router and import it inside the ASR5000.