Using n of -2 includes all certificate except for the root cert,
-1 includes all certs, 0 does not include any certs, 1 includes only
the signers cert (this is the default) and all other positive
values include up to n certificates starting with the signer cert.
--cipher-algo oid
Use the cipher algorithm with the ASN.1 object identifier oid for
encryption. For convenience the strings 3DES, AES and
AES256 may be used instead of their OIDs. The default is
3DES (1.2.840.113549.3.7).