anchor.diff:  ----
   $ openssl pkcs12 -in keystore.p12  -nodes -nocerts -out key.pem
   ----
  +
  +== Advanced use cases
  +
  +=== Managing multiple keystores with one scep-client installation
  +
  +Through the commandline option `--base-dir` you can tell the scep-client to use an alternative base directory.
  +It will then use the configuration `etc/application.conf` under that directory.
  +Also the keystore can be placed under that directory, when you use the `scepclient.home` variable, as in the above example.
  +
  +.Configuration, to place the keystore relative to the directory given with `--base-dir`
  +```
  +blended.security.ssl.keyStore = ${scepclient.home}/etc/keystore
  +```
  
positive.code:                       containing certificates from SCEP server
    --salt,-s salt      Use this salt when generating a password with
                        --password
  ----
  
  To initialy get the configured certificate(s) use the following command:
  
  ----
  $ java -jar scep-client.jar --refresh-certs
  
negative.code: 
  The same command is used to check and, if required, refresh the certificate(s).
  
  After the certificates were initially fetched and checked successful, the application will return with exit code `0`.
  
  In case of an error or if one of the certificates were no longer valid, the application will return with an exit code other than `0`.
  
  If an error occurs while connection to the SCEP server or processing the certificates, _but_ all certificate are still valid, the application will return with exit code `0`.
  
  You can inspect the application log file `log/scep-client.log` for processing and error details.
  
  