carta
getcert-refresh(1) on Linux
The text d7f4805bf96e, as Debian 9 (Stretch) shipped it.
Flags it lists
-a
getcert-refresh(1) on Linux now
