OpenSSL error messages suck, help a user out before it gets there. This also should happen well before folders get created and empty key/cert artifacts get created.