certcheck has a --help argument