---running attribute 
Usage: creddy --attribute \
                --issuer <cert> --key <key> --role <role> \
                [ --subject-cert <cert> | --subject-id <sha1> \
                    [ --subject-role <role> ]  ... ] \
                [ --validity <time> ] --out <file>
    default validity: 365 days
    provide exactly one of --subject-cert / --subject-id
    give multiple --subject-{cert,id} / --subject-role pairs for intersection

    time is specified with optional suffix: s m h d y
    defaults to days if unspecified
wrong private key for the cert!!
creddy: Can't load private key from Coyote_private.pem