small refactoring, humah readable dates in certificate list, and optional password for certificates