carta
getcert-refresh(1) on Linux
The text 8f7d56158342, as Debian 10 (Buster) shipped it.
Flags it lists
-a
getcert-refresh(1) on Linux now