usage is :  ./cert-gridadmin  <arguments>
    version V1-7
       -host <FQDN>  for OU=Services, required
       -service <service name>   for OU=Services, optional
       -email <your email, as the owner of the requested certificate>
       -affiliation <user's affiliation>
          (name of your VO or RA to process this request)
       -list  display list of available RA affiliations and exit
       -password <optional file containing passphrase for private key>
       -request  <optional certificate request>
       -pdir  <optional directory to find user credential for authentication>
                    defaults to /home/olson/.globus
       -sdir  <optional directory to put services credential being generated>
                   defaults to .
       -ca <name of CA to use, either 'test' or (default) 'doegrids'>
       -show  list several parameters of the issued certificate upon successful completion
       -debug spews lots of output to the terminal
       -dryrun  executes script but does not actually post request to CA
                    implies -noclean
       -noclean  do not delete temporary files
       -help  prints this message
       -V    prints package version and exits
       any required omitted argruments will be prompted for


  When successful, a certificate (and key) file is generated with
  a name like NNNNNcert.pem (NNNNNkey.pem).  These files should be
  moved to the proper location and the key file protected carefully
  since, as a service certificate key, it is not encrypted or
  password protected.

 Side effects:
      Generates some temporary files that are removed automatically
      under normal circumstances.

  To use the gridadmin interface you must have your personal certificate
  pre-authorized with the CA.  If you are unsure if this was done you
  should check with your Registration Authority.  A list of RAs are shown at
  www.doegrids.org.
  It is recommended that you verify that the certificate subject names you
  are requesting are not already issued to someone else. You can do this
  with the cert-lookup script, or via a search for certificates at the
  www.doegrids.org web site.
 
 
  This software is contributed to the DOEGrids PKI and is supported by
  the PPDG RA.  Please send any questions, comments, problems to
  ra@ppdg.net and/or dlolson@lbl.gov.