Make self-signed cert with SHA-256 in --makepem
Make default ciphers a bit better
Show fingerprints with colons