[[[ Certificate Overlord ]]]

* GUI with modern design (responsive)
  -modern form input features: auto complete, highlighting
* simple wizard
* simple mode for "generate client certificate"
* advanced mode for "create template"
* uses modern crypto (wolfssl, openssl, can be in FIPS mode)
* batch generation from templates
* key generation using good random bits
* export to .p12 files using password-scheme

** SCEP support using 3rd party (headless mode)
  -use the GUI to turn the service on/off
  -pre-packaged
  -can use the same CA-I as the GUI, but headless ("keystore")