Reading through some URLs and it fairly common for stating that the following command is used to create a public/private key pair. 

```
 keytool -genkey -alias mydomain -keyalg RSA -keystore keystore.jks -storepass password

```

Then it continues on and indicates the following command is used to create a self signed certificate.

```
 keytool -genkey -alias selfsigned -keyalg RSA -keystore keystore.jks -storepass password -validity 360

```

From what I see, the only difference is adding "-validity 360". 

Question 1 - Does simply adding "-validity 360" change from generating a key pair to a self-signed certificate?

Question 2 - Are "key pairs" and "self-signed certificate" essentially synonymous?

Question 3 - could either the key pair or "self-signed certificate" be used for an official CSR?