$ getcert
getcert - client certificate enrollment tool
Usage: getcert command [options]
request request a new certificate from a CA
start-tracking begin monitoring an already-issued certificate
stop-tracking stop monitoring a certificate
resubmit resubmit an in-progress enrollment request, or start a new one
rekey generate a new private key and replace a certificate
refresh check on the status of an in-progress enrollment request
list list certificates being monitored and requested
status check the status of a certificate being monitored or requested
add-ca add a CA configuration
add-scep-ca add an SCEP CA configuration
list-cas list known CA configurations
modify-ca modify a CA configuration
refresh-ca refresh cache of all information obtained from a CA
remove-ca remove a CA configuration