Can CA issue a certificate without CSR?

My question is if the CA can generate a private/public keypair on behalf of the requestor and sign it with its own private key?

Is there any standard way or protocol to distribute such a certificate?

I know that the p12 format is used to store private key as well as the public certificate and this file is password protected. Is this a common practice of a CA to offer this service?