-rev bump to -r3, added a simple x509 certificate creation script, fixed missing private directory and deleted demo/expired certs