sbsign(1) on Linux
The text 486e6e72273d, as Debian 11 (Bullseye), Debian 10 (Buster) shipped it.
UEFI secure boot signing tool
Flags it lists
-
--cert -
--detached -
--engine -
--key -
--output