Selection criteria for certs of interest now works.
Not writing selected certs back out yet, just dumping them.