carta
getcert-list-cas(1) on Linux
The text 5a3d490fab5b, as Debian 9 (Stretch) shipped it.
Flags it lists
-c
getcert-list-cas(1) on Linux now