Reference

pki---scepca(1) on Linux

The text f9b340bfabbd, as Debian 13 (Trixie) shipped it.

Get CA [and RA] certificate[s] from a SCEP server

Flags it lists

pki---scepca(1) on Linux now