certificate system options:
    --dirsrv-cert-file=FILE
                        File containing the Directory Server SSL certificate
                        and private key
    --http-cert-file=FILE
                        File containing the Apache Server SSL certificate and
                        private key
    --pkinit-cert-file=FILE
                        File containing the Kerberos KDC SSL certificate and
                        private key
    --dirsrv-pin=PIN    The password to unlock the Directory Server private
                        key
    --http-pin=PIN      The password to unlock the Apache Server private key
    --pkinit-pin=PIN    The password to unlock the Kerberos KDC private key
    --dirsrv-cert-name=NAME
                        Name of the Directory Server SSL certificate to
                        install
    --http-cert-name=NAME
                        Name of the Apache Server SSL certificate to install
    --pkinit-cert-name=NAME
                        Name of the Kerberos KDC SSL certificate to install
    --skip-schema-check
                        skip check for updated CA DS schema on the remote
                        master

   CERTIFICATE SYSTEM OPTIONS
       --setup-ca
              Install and configure a CA on this replica. If a CA is not configured then certificate operations will be forwarded to a master with a CA installed.

       --no-pkinit
              Disables pkinit setup steps

       --skip-schema-check
              Skip check for updated CA DS schema on the remote master