Sun Java System Access Manager 7.1 Developer's Guide  Using
certutil for Client Certificate Management  Certutil is a
command-line utility that can create and modify cert7.db and
key3.db database files. It can also list, generate, modify, or
delete certificates within the cert7.db file and create or
change the password, generate new public and private key pairs,
display the contents of the key database, or delete key pairs
within the key3.db file. The key and certificate management
process usually begins with creating keys in the key database,
then generating and managing certificates in the certificate
database.