[13:49:34:871] [2:00000002] [ERROR][com.winpr.commandline] - [CommandLineParseArgumentsA]: Failed at index 1 [<censored: build with -DWITH_DEBUG_UTILS_CMDLINE_DUMP=ON for details>]: Unexpected keyword
Usage: /usr/bin/winpr-makecert [options] [output file]

    -rdp                 	Unsupported - Generate certificate with required options for RDP usage.
    -silent              	Silently generate certificate without verbose output.
    -live                	Generate certificate live in memory when used as a library.
    -format <crt|pem|pfx>	Specify certificate file format
    -path <path>         	Specify certificate file output path
    -p <password>        	Specify certificate export password
    -n <name>            	Specifies the subject's certificate name. This name must conform to the X.500 standard. The simplest method is to specify the name in double quotes, preceded by CN=; for example, -n "CN=myName".
    -pe                  	Unsupported - Marks the generated private key as exportable. This allows the private key to be included in the certificate.
    -sk <keyname>        	Unsupported - Specifies the subject's key container location, which contains the private key. If a key container does not exist, it will be created.
    -sr <location>       	Unsupported - Specifies the subject's certificate store location. location can be either currentuser (the default) or localmachine.
    -ss <store>          	Unsupported - Specifies the subject's certificate store name that stores the output certificate.
    -# <number>          	Specifies a serial number from 1 to 2,147,483,647. The default is a unique value generated by Makecert.exe.
    -$ <authority>       	Unsupported - Specifies the signing authority of the certificate, which must be set to either commercial (for certificates used by commercial software publishers) or individual (for certificates used by individual software publishers).
    -a <algorithm>       	Specifies the signature algorithm. algorithm must be md5, sha1, sha256 (the default), sha384, or sha512.
    -b <mm/dd/yyyy>      	Unsupported - Specifies the start of the validity period. Defaults to the current date.
    -crl                 	Unsupported - Generates a certificate relocation list (CRL) instead of a certificate.
    -cy <certType>       	Unsupported - Specifies the certificate type. Valid values are end for end-entity and authority for certification authority.
    -e <mm/dd/yyyy>      	Unsupported - Specifies the end of the validity period. Defaults to 12/31/2039 11:59:59 GMT.
    -eku <oid[,oid…]>  	Unsupported - Inserts a list of comma-separated, enhanced key usage object identifiers (OIDs) into the certificate.
    -h <number>          	Unsupported - Specifies the maximum height of the tree below this certificate.
    -ic <file>           	Unsupported - Specifies the issuer's certificate file.
    -ik <keyName>        	Unsupported - Specifies the issuer's key container name.
    -iky <keyType>       	Unsupported - Specifies the issuer's key type, which must be one of the following: signature (which indicates that the key is used for a digital signature), exchange (which indicates that the key is used for key encryption and key exchange), or an integer that represents a provider type. By default, you can pass 1 for an exchange key or 2 for a signature key.
    -in <name>           	Unsupported - Specifies the issuer's certificate common name.
    -ip <provider>       	Unsupported - Specifies the issuer's CryptoAPI provider name. For information about the CryptoAPI provider name, see the –sp option.
    -ir <location>       	Unsupported - Specifies the location of the issuer's certificate store. location can be either currentuser (the default) or localmachine.
    -is <store>          	Unsupported - Specifies the issuer's certificate store name.
    -iv <pvkFile>        	Unsupported - Specifies the issuer's .pvk private key file.
    -iy <type>           	Unsupported - Specifies the issuer's CryptoAPI provider type. For information about the CryptoAPI provider type, see the –sy option.
    -l <link>            	Unsupported - Links to policy information (for example, to a URL).
    -len <number>        	Specifies the generated key length, in bits.
    -m <number>          	Specifies the duration, in months, of the certificate validity period.
    -y <number>          	Specifies the duration, in years, of the certificate validity period.
    -nscp                	Unsupported - Includes the Netscape client-authorization extension.
    -r                   	Unsupported - Creates a self-signed certificate.
    -sc <file>           	Unsupported - Specifies the subject's certificate file.
    -sky <keyType>       	Unsupported - Specifies the subject's key type, which must be one of the following: signature (which indicates that the key is used for a digital signature), exchange (which indicates that the key is used for key encryption and key exchange), or an integer that represents a provider type. By default, you can pass 1 for an exchange key or 2 for a signature key.
    -sp <provider>       	Unsupported - Specifies the subject's CryptoAPI provider name, which must be defined in the registry subkeys of HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider. If both –sp and –sy are present, the type of the CryptoAPI provider must correspond to the Type value of the provider's subkey.
    -sv <pvkFile>        	Unsupported - Specifies the subject's .pvk private key file. The file is created if none exists.
    -sy <type>           	Unsupported - Specifies the subject's CryptoAPI provider type, which must be defined in the registry subkeys of HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types. If both –sy and –sp are present, the name of the CryptoAPI provider must correspond to the Name value of the provider type subkey.
    -tbs <file>          	Unsupported - Specifies the certificate or CRL file to be signed.
    -?                   	print help
    -!                   	print extended help