Reference

pki---issue(1) on Linux

The text 0a34df438291, as Debian 9 (Stretch) shipped it.

Issue a certificate using a CA certificate and key

Flags it lists

pki---issue(1) on Linux now