docs: function makeRaw(cert, type, keys, password) {
      return new Promise(function (res, rej) {
          // if pkcs
          var raw = null;
          if (type === "pkcs") {
              var newPkcs12Asn1 = forge.pkcs12.toPkcs12Asn1(
                  keys.privateKey, [cert], password);
                  //{generateLocalKeyId: true, friendlyName: config.c}
              var newPkcs12Der = forge.asn1.toDer(newPkcs12Asn1).getBytes();
              raw = newPkcs12Der;
          } else if (type === "pem") {
              if (!password || password === "") {
                  raw = forge.pki.privateKeyToPem(keys.privateKey);
              } else {
                  raw = forge.pki.encryptRsaPrivateKey(keys.privateKey, password);
              }           
              raw = raw + "\n" + forge.pki.certificateToPem(cert);
          }
          
          if (raw) {
              res(raw);
          } else {
              rej(new Error("unrecognized type: "+type));
          }
      })
  }