Reference

pki---issue(1) on Linux

The text b12b672375fc, as Debian 12 (Bookworm) shipped it.

Issue a certificate using a CA certificate and key

Flags it lists

pki---issue(1) on Linux now