carta
ipa-getcert(1) on Linux
The text 840c71f6ce8c, as Debian 9 (Stretch) shipped it.
ipa-getcert(1) on Linux now