anchor.diff:                        containing certificates from SCEP server
     --salt,-s salt      Use this salt when generating a password with
                         --password
  -----
  -
  -To initialy get the configured certificate(s) use the following command:
  +  --timeout sec       Timeout (in seconds) used when refreshing certificates
  +----
  +
  +To initially get the configured certificate(s) use the following command:
   
   ----
   $ java -jar scep-client.jar --refresh-certs
  
positive.code: ----
  $ openssl pkcs12 -in keystore.p12  -nodes -nocerts -out key.pem
  ----
  
negative.code: 
  The same command is used to check and, if required, refresh the certificate(s).
  
  After the certificates were initially fetched and checked successful, the application will return with exit code `0`.
  
  In case of an error or if one of the certificates were no longer valid, the application will return with an exit code other than `0`.
  
  If an error occurs while connection to the SCEP server or processing the certificates, _but_ all certificate are still valid, the application will return with exit code `0`.
  
  You can inspect the application log file `log/scep-client.log` for processing and error details.
  
  