Auto detect when --pubx509 option needed
treed59448cc0aee9b5144d7f699287d93339934bdc7
-rwxr-xr-x 48305 CACreateCertClient
-rwxr-xr-x 27036 CACreateCertRoot