separated private key gen now in generatecert.sh
update msgs in signopkglist