Just in case this raised the eyebrows of anyone else who knows a bit about public key cryptography, you don't, in fact, "sign your confirmation upload with a public key they assign", you sign with the private key they give you, from the key pair they assign.
https://lotw.arrl.org/lotw-help/certreq/?lang=en