anchor.diff:  [subs="attributes,verbatim"]
   ----
   {binpack}
  -+-- etc/
  -|   +-- application.conf      <1>
  -|   +-- keystore              <2>
  -+-- libs/                     <3>
  -|       ...
  -+-- log/
  -|   +-- scep-client.log       <4>
  -+-- README.adoc               <5>
  -+-- scep-client.jar           <6>
  -----
  -
  -<1> The configuration file`application.conf` in the central place to configure the application.
  -<2> The keystore file is automatically created and consecutively updated by the application.
  -<3> The `lib` directory contains required libries (JAR files).
  -<4> The log file contains verbose runtime information.
  -<5> This Documentation.
  +├── README.adoc            <1>
  +├── etc
  +│   ├── application.conf   <2>
  +│   └── keystore           <3>
  +├── libs                   <4>
  +│   └── ...
  +├── log
  +│   └── scep-client.log    <5>
  +└── scep-client.jar        <6>
  +----
  +
  +<1> This Documentation.
  +<2> The configuration file `application.conf` in the central place to configure the application.
  +<3> The keystore file is automatically created and consecutively updated by the application.
  +<4> The `lib` directory contains required libries (JAR files).
  +<5> The log file contains verbose runtime information.
   <6> The application JAR file, containing the main application.
   
   
  
positive.code: ----
  $ openssl pkcs12 -in keystore.p12  -nodes -nocerts -out key.pem
  ----
  
negative.code:                       containing certificates from SCEP server
    --salt,-s salt      Use this salt when generating a password with
                        --password
    --timeout sec       Timeout (in seconds) used when refreshing certificates
  ----
  
  To initially get the configured certificate(s) use the following command:
  
  ----
  $ java -jar scep-client.jar --refresh-certs
  