certs_differ now detects if both certs are none thus equal, and if any is none and ssl is required
improve cmd line options

* show task_type in --tree and --tasks
* add --show-external and --finish options