PKI Server OCSP CLI - dogtagpki/pki GitHub Wiki
To export the OCSP system certificates for cloning, execute the following command:
$ pki-server ocsp-clone-prepare --pkcs12-file ocsp-certs.p12 --pkcs12-password-file password.txt
See also Installing OCSP Clone