Reference

pki---issue(1) on Linux

The text 59303cf568e9, as Debian 10 (Buster) shipped it.

Issue a certificate using a CA certificate and key

Flags it lists

pki---issue(1) on Linux now