The convenience argumetn for -nameopt and -certopt is ca_default, not