Rewrote the whole thing. The help/guide is in the generated cert.dat file.