sbsign(1) on Linux
The text 5a019668d5d2, as Debian 12 (Bookworm) shipped it.
UEFI secure boot signing tool
Flags it lists
-
--cert -
--detached -
--engine -
--key -
--output