gencert: update docs, config, add test mode, and test.cf