PKI Server CA CLI - dogtagpki/pki GitHub Wiki
To export the CA system certificates for cloning, execute the following command:
$ pki-server ca-clone-prepare --pkcs12-file ca-certs.p12 --pkcs12-password-file password.txt
See also Installing CA Clone.