redo-ifchange prv.pem cert.tmpl
certtool --generate-self-signed --load-privkey prv.pem --template cert.tmpl