certreq is a maintenance command. It requests and retrieves a certificate from a key server or other host. You must specify the key ID and key server. This command is a debugging tool and is not meant for general use. The interface is cryptic and there is no way to specify a host name or IP address instead of the key ID, even if the key ID is identical to the IP address.
certreq [-d] [-n NSID] [-h server] [keyid]
-d |
Requests that the received certificate be decoded prior to output. Without the -d option, the raw certificate, suitable for saving into a file, is written to standard out. |
-n NSID |
By default NSID 1 is used for retrieves. Any NSID number may be specified with the -n option. |
-h server |
Specifies the key server. |
keyid |
The Master Key ID specified in hex. |