+ certtool --generate-privkey --outfile client-key.pem
+ certtool --generate-request --load-privkey client-key.pem --outfile client-req.pem --template client-cert.tpl
+ certtool --generate-certificate --load-request client-req.pem --outfile client-cert.pem --load-ca-certificate ca-cert.pem --load-ca-privkey ca-key.pem --template client-cert.tpl