add certificate "name_CERTIFICATE" SINGLE NSID # MKID "#"
add certificate "name_CERTIFICATE" GROUP "name_CERTIFICATE" ...
For GROUP certificates, a space-separated list of "name_CERTIFICATE" entries follows the GROUP keyword.
The following fields are optional for SINGLE entries and may be specified in any order after the "certificate" keyword:
G #
P #
KEY_LENGTH #
LOCAL "name_SCREEN"
The following fields are optional and can be specified in any order after the "certificate" keyword:
SCREEN "name_SCREEN"
COMMENT "comment string"