Regenerate certificates

Regenerate certificates using py509-0.0.3, which adds subject and
authority key identifiers to all certificates.
Add meaningful help output.

I couldn't remember how to run my own tools!