Previous method no longer worked, updated to a new method that worked (for me, at least). Was able to remove .key/.crt file splitting step and usher CA certificate step. Added troubleshooting & instructions for dealing with eduroam deprecated protocols.
