tag=${tagdir##*/} cert=$tagdir/full-chain
if openssl x509 -in "$cert" -noout -checkend $certlife; then continue; fi
set +e; $home/bin/make-cert "$tag"; rc=$?; set -e
tag=${tagdir##*/} cert=$tagdir/full-chain
if openssl x509 -in "$cert" -noout -checkend $certlife; then continue; fi
set +e; $home/bin/make-cert "$tag"; rc=$?; set -e