# Carols acert for sales and finance
pki --acert \
	--issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \
	--issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \
	--in ../../../hosts/carol/etc/ipsec.d/certs/carolCert.pem \
	--group sales --group finance -l 87600 -f pem \
	> hosts/moon/etc/ipsec.d/acerts/carol-sales-finance.pem

# Daves acert for marketing
pki --acert \
	--issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \
	--issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \
	--in ../../../hosts/dave/etc/ipsec.d/certs/daveCert.pem \
	--group marketing -l 87600 -f pem \
	> hosts/moon/etc/ipsec.d/acerts/dave-marketing.pem

# Daves expired acert for sales
pki --acert \
	--issuercert hosts/moon/etc/ipsec.d/aacerts/aa.pem \
	--issuerkey hosts/moon/etc/ipsec.d/private/aa.pem \
	--in ../../../hosts/dave/etc/ipsec.d/certs/daveCert.pem \
	--group sales -F "01.01.13 08:00:00" -l 240 -f pem \
	> hosts/moon/etc/ipsec.d/acerts/dave-sales-expired.pem