sbsign(1) on Linux
The text 4b90a45a7a93, as Debian 9 (Stretch) shipped it.
UEFI secure boot signing tool
Flags it lists
-
--cert -
--detached -
--key -
--output