tyring better command for generating certs...
putting generated passwords in private/