anchor.diff:  Usage: java -jar scep-client.jar [options]
   
   Options:
  +  --base-dir dir      Alternative base directory (aka scepclient.home,
  +                      used to lookup the etc directory)
     --help,-h           Show this help
     --password,-p seed  Generate a password from a given seed and salt.
                         The salt is either implicitly set or explicitly
  
positive.code: 
  The same command is used to check and, if required, refresh the certificate(s).
  
  After the certifcates were initially fetched and checked successful, the application will return with exit code `0`.
  
  In case of an error or if one of the certificates were no longer valid, the application will return with an exit code other than `0`.
  
  If an error ocurs while connection to the SCEP server or processing the certificates, _but_ all certificate are still valid, the application will return with exit code `0`.
  
  You can inspect the application log file `log/scep-client.log` for processing and error details.
  
  
negative.code:                       containing certificates from SCEP server
    --salt,-s salt      Use this salt when generating a password with
                        --password
    --timeout sec       Timeout (in seconds) used when refreshing certificates
  ----
  
  To initially get the configured certificate(s) use the following command:
  
  ----
  $ java -jar scep-client.jar --refresh-certs
  