I've had good luck with caman (https://github.com/radiac/caman), but it doesn't do any of the fancy certificate installation bits. This looks neat and useful.