add certificate "name_CERTIFICATE" SINGLE NSID # MKID "#"
add certificate "name_CERTIFICATE" GROUP "name_CERTIFICATE" ...
For GROUP certificates, a space-separated list of name_CERTIFICATE entries follows the GROUP keyword.
The following fields are optional for SINGLE entries and may be specified in any order after the certificate keyword:
G #
P #
KEY_LENGTH #
LOCAL "name_SCREEN"
The following fields are optional and can be specified in any order after the "certificate" keyword:
SCREEN "name_SCREEN"
COMMENT "comment string"