From 135a7f35188177778a2a55d3ad479f9a4917719c Mon Sep 17 00:00:00 2001
From: Nalin Dahyabhai <nalin@redhat.com>
Date: May 07 2015 20:56:19 +0000
Subject: Update translations


---

diff --git a/po/bg.po b/po/bg.po
index 236983d..e916e87 100644
--- a/po/bg.po
+++ b/po/bg.po
@@ -1,133 +1,190 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Boris Yakimov <borisyakimov@ymail.com>, 2012
 # Valentin Laskov <laskov@festa.bg>, 2011-2013
+# Valentin Laskov <laskov@festa.bg>, 2015. #zanata
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
-"PO-Revision-Date: 2014-11-11 05:00-0500\n"
-"Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Bulgarian (http://www.transifex.com/projects/p/certmonger/"
-"language/bg/)\n"
-"Language: bg\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
+"PO-Revision-Date: 2015-04-14 04:13-0400\n"
+"Last-Translator: Valentin Laskov <laskov@festa.bg>\n"
+"Language-Team: Bulgarian (http://www.transifex.com/projects/p/certmonger/"
+"language/bg/)\n"
+"Language: bg\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Не може да се определи името на CA хоста.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Не може да се прочете заявката за подписване.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Грешка при подготовка за XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Грешка при анализ отговора от сървъра.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Сървърна грешка.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Недостиг на памет.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr "Няма зададен agent URL (-A), а няма и такъв по подразбиране.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
-msgstr ""
+msgstr "Поискано е обновяване, но не е зададен сериен номер.\n"
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr "Няма зададен end-entity URL (-E), а няма и такъв по подразбиране.\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr "Няма зададен agent URL (-A), а няма и такъв по подразбиране.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Няма зададен profile/template (-T), а няма и такъв по подразбиране.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
-msgstr ""
+msgstr "Грешка при изключването на NSS.\n"
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Вътрешна грешка: непознато състояние.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "Грешка %d при свързване към %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Грешка %d при свързване към %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Вътрешна грешка: няма отговор до \"%s?%s\".\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr "Пътят \"%s\" не е абсолютен, вместо него, пробвам \"%s\".\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -136,166 +193,306 @@ msgstr ""
 "Пътят \"%s\" не е абсолютен и се получи грешка при определяне името на "
 "текущата директория.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Пътят \"%s\" не е директория.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Път \"%s\": %s.⏎\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "Пътят \"%s\" не е обикновен файл.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
-msgstr ""
+msgstr "Грешка при свързването към D-Bus.\n"
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Моля, проверете дали услугата за съобщения (D-Bus) работи.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Грешка при създаване на DBus съобщение-заявка.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Грешка %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Грешка %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Грешка: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Получен е отговор за грешка от локална %s услуга.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Не е получен отговор от услугата %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Грешка при инициализиране на Kerberos библиотеката: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
-msgstr ""
+msgstr "Липсва поддръжка за генериране на \"%s\" ключове.\n"
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
-msgstr ""
+msgstr "Познатите типове ключове включват:"
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Неразпознат keyUsage \"%s\".\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Не може да се пресметне OID \"%s\".\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Грешка при разбора на главното име на Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Грешка при сглобяването на главното име на Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
-msgstr ""
+msgstr "%s: невалидна стойност -- '%s'\n"
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: опцията изисква аргумент -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: грешна опция -- '%c'⏎\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
-msgstr ""
-"Грешка: неизползван допълнителен аргумент \"%s\".⏎\n"
+msgstr "Грешка: неизползван допълнителен аргумент \"%s\".⏎\n"
 "\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Грешка: бяха предоставени неизползвани допълнителни аргументи.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 "Местоположение на базата данни или псевдоним е определено без другото.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Определени са и директория на базата данни, и файл със сертификата.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -303,13 +500,13 @@ msgstr ""
 "Никое от директория на базата данни и псевдоним, или файл със сертификат не "
 "е определено.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "Не може и ключът, и сертификатът, да бъдат записани в един и същ файл.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -318,540 +515,674 @@ msgstr ""
 "Задният слой на IPA изисква използването на -K опция (главно име), когато -N "
 "опцията (име на обекта) се използва.⏎\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Не е намерен CA с име \"%s\".\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Грешка при задаване аргументите на заявката.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Добавена е нова заявка за подписване \"%s\".\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Новата заявка за подписване не можа да бъде добавена.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Беше добавена нова проследявана заявка \"%s\".\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Не може да бъде добавена нова проследявана заявка.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Никое от ID, или директория на базата данни и псевдоним, или файл със "
 "сертификат не е определено.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Беше променена заявката \"%s\".\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Не можа да бъде променена заявката \"%s\".\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Не е намерено искане за този псевдоним.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Не беше намерена заявка, отговаряща на аргументите.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Беше премахната заявката \"%s\".\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Не можа да бъде премахната заявката \"%s\".\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Грешка при промяна \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Повторно изпращане на \"%s\" към \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Повторно изпращане на \"%s\".\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Грешка при опит за изпращане на \"%s\" към \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Грешка при опит за изпращане на \"%s\".\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
-msgstr ""
+msgstr "Заявка ID '%s' се обновява.\n"
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
+msgstr "Заявка ID '%s' НЕ се обновява.\n"
+
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Брой на проследяваните сертификати и заявки: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID на заявка '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "        състояние: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "        CA-грешка: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "        останал: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "        хранилище на ключови двойки: тип=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "НИЩО"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",местоположение='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",псевдоним='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",пин='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",пинфайл='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "        сертификат: тип=%s,местоположение='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "        CA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "        издател: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "        обект: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "        изтича на: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "непознат"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\temail: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "»главно име: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
-msgstr ""
+msgstr "\tIP адрес: "
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tkey usage: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tpre-save команда: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tpost-save команда: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttrack: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renew: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-type: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\thelper-location: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "»следващ-сериен-номер: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "        познати-имена-на-издатели:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - инструмент за записване на клиентски сертификат\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Употреба: %s request [опции]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Необходими аргументи:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Ако за хранилище се използва NSS база данни:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR         NSS база данни за ключ и сертификат\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAME        псевдоним за NSS-базирано хранилище (валидно само с -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAME        незадължително token name за NSS-базирано хранилище "
 "(валидно само с -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Ако за хранилище се използват файлове:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE        PEM файл за частен ключ\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE        PEM файл за сертификат (валидно само с -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Ако ключовете трябва да бъдат криптирани:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE        файл, съдържащ ПИН за криптиране\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN        стойност на ПИН\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Незадължителни аргументи:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Настройки на обработката на сертификата:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME        псевдоним, който да бъде присвоен към заявката\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g SIZE»големина на ключ, който да бъде генериран ако няма вече създаден "
 "такъв⏎\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r             опит за подновяване на сертификата, когато изтичането му "
 "наближава (по подразбиране)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R             не опитвай подновяване на сертификата, когато изтичането му "
 "наближава\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA          използвай зададения CA вместо този по подразбиране\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -859,550 +1190,631 @@ msgstr ""
 "  -T PROFILE\tиска CA да обработи заявката, използвайки профил или шаблон с "
 "това име\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Параметри за подписване на заявките:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAME        задава заявеното име на обекта (по подразбиране: CN=<име на "
 "хост>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\tзадава искан разширен OID ключ за употреба\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\tзадава исканата key usage стойност\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME\tзадава искано principal име\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAME\tзадава искано DNS име\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL     задава заявения имейл адрес\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Опции на шината:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 "  -S                свържи се с услугата certmonger през системната шина\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 "  -s                свържи се с услугата certmonger през сесийната шина\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Други опции:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tкоманда за изпълнение преди записа на сертификата\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tкоманда за изпълнение след записа на сертификата\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v        показва всички подробности за грешките\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Употреба: %s start-tracking [опции]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Ако се променя съществуваща заявка:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME        псевдоним от съществуваща проследявана заявка\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Ако ключовете са криптирани:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 "  -I NAME        псевдоним, който да бъде даден към проследяваната заявка\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Параметри за заявката за подписване по време на подновяването:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\tзамества искания разширен OID ключ за употреба\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME\tзамества исканото principal име\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\tзамества исканото DNS име\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "-E EMAIL»смяна на искания email адрес\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Употреба: %s stop-tracking [опции]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* По идентификатор на заявката:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME        псевдоним за проследяваната заявка\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Употреба: %s resubmit [опции]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE        PEM файл за сертификата\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Нови стойности на параметри за подписваната заявка:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 "  -I NAME        нов псевдоним, който да бъде даден към проследяваната "
 "заявка\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA                използвай зададения CA вместо текущия\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Употреба: %s list [опции]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Основни опции:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA          само показва заявките и сертификатите, асоциирани с това "
 "CA\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r              само показва информация за неуредените заявки\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 "  -t              само показва информация за проследяваните сертификати\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Ако изберете специфична заявка:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR        само показва списък на заявките и сертификатите, използващи "
 "тази NSS база данни\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAME       само показва списък на заявките и сертификатите, използващи "
 "този псевдоним\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FILE       само показва списък на заявките и сертификатите, записани в "
 "този PEM файл\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S          свържи се с услугата certmonger през системната шина\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s          свържи се с услугата certmonger през сесийната шина\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Употреба: %s list-cas [опции]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA          само показва информация за CA с това име\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: непозната команда\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "Опцията -t не може да бъде използвана заедно с -K опция.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "Опциятата -к не може да бъде използвана заедно с -К опция.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "Опцията -К не може да бъде използвана с -k или -t опции.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Не може да бъде установено главно име за заявката за подписване.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Употреба: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         използвай сесийната шина\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         използвай системната шина\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         не ставай демон\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         стани демон\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b TIMEOUT активиран от шината, idle timeout\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         не използвай idle timeout\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d LEVEL   задава ниво за дебъг (implies -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p FILE    запиши PID на услугата във файл FILE\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Възникна вътрешна грешка."
 
@@ -1415,116 +1827,117 @@ msgstr "Не бяха намерени такива записи.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Вече има CA с псевдонима \"%s\"."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Не е определен тип на хранилището на сертификати."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Не се поддържа хранилище на сертификати от тип \"%s\"."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Местоположението \"%s\" трябва да е абсолютен път."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Местоположението на хранилището на сертификати не е определено."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Частта преди местоположението \"%s\" трябва да е валидна директория."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Местоположението \"%s\" трябва да е файл."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Местоположението \"%s\" трябва да е директория."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Псевдонимът на сертификата не е определен."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Вече има заявка с псевдонима \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Сертификатът на зададеното място вече се използва  от друг псевдоним \"%s\"."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Не се поддържа хранилище на ключове от тип \"%s\"."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "Местоположението на хранилището на ключове не е определено."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Псевдонимът на ключа не е определен."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr "Ключът на зададеното място вече се използва от друг псевдоним \"%s\"."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Няма такъв CA."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Сертифициращият орган \"%s\" е непознат."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Неразпознат параметър или грешен тип на стойност."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/ca.po b/po/ca.po
index dbbbef7..441cd06 100644
--- a/po/ca.po
+++ b/po/ca.po
@@ -1,142 +1,198 @@
 # Robert Antoni Buj Gelonch <rbuj@fedoraproject.org>, 2015. #zanata
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2015-03-16 05:39-0400\n"
 "Last-Translator: Robert Antoni Buj Gelonch <rbuj@fedoraproject.org>\n"
 "Language-Team: Catalan\n"
 "Language: ca\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Zanata 3.6.2\n"
 "Plural-Forms: nplurals=2; plural=(n != 1)\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "No es pot determinar el nom d'amfitrió de l'AC.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "No es pot llegir la sol·licitud de signatura.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "S'ha produït un error en preparar-se per a l'XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
-"S'ha produït un error en analitzar sintàcticament la resposta del servidor.\n"
+"S'ha produït un error en analitzar sintàcticament la resposta del servidor."
+"\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Error del servidor.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 "Els paràmetres del perfil (-O) han de tenir la forma paràmetre=valor.\n"
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Sense memòria.\n"
 
-#: src/dogtag.c:276
-#, fuzzy, c-format
+#: src/dogtag.c:246
+#, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
-"Els paràmetres del perfil (-O) han de tenir la forma paràmetre=valor.\n"
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 "No s'han especificat les credencials de l'agent, i no n'hi ha cap de conegut "
 "per defecte.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 "Es va sol·licitar una renovació, però no es va proporcionar cap número de "
 "sèrie.\n"
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 "No s'ha indicat cap URL de l'entitat final (-E), i no n'hi ha cap de "
 "coneguda per defecte.\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 "No s'ha indicat cap URL de l'agent (-A), i no n'hi ha cap de conegut per "
 "defecte.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 "No s'ha indicat cap perfil/plantilla (-T), i no n'hi ha cap de conegut per "
 "defecte.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr "S'ha produït un error en aturar NSS.\n"
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "S'ha produït un error intern: estat desconegut.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 "No s'han especificat les credencials de l'agent (-n) però són necessàries.\n"
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "S'ha produït l'error %d en connectar-se a %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "S'ha produït l'error %d en connectar-se a %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "S'ha produït un error intern: sense resposta a \"%s?%s\".\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 "El camí \"%s\" no és absolut, s'està intentant d'utilitzar \"%s\" en lloc "
 "seu.\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -145,174 +201,315 @@ msgstr ""
 "El camí \"%s\" no és absolut i a més d’això hi va haver un error en "
 "determinar el nom del directori actual.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr "Camí \"%s\": permisos insuficients.\n"
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "El camí \"%s\" no és un directori.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Camí \"%s\": %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "El camí \"%s\" no és un fitxer regular.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr "No hi ha cap bus de sistema executant-se.\n"
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr "S'està executant com a UID 0.\n"
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr "S'està llançant el dimoni de servei dedicat temporal.\n"
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr "S'ha produït un error en connectar amb D-Bus.\n"
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
 "Si us plau, comproveu que s'estigui executant el servei del bus de missatges "
 "(D-Bus).\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "S'ha produït un error en crear el missatge de sol·licitud DBUS.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Error %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Error %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Error: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "S'ha rebut una resposta d'error del servei local %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "No s'ha rebut cap resposta del servei %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr "Estat %s, branca: %s.\n"
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 "S'ha produït un error en inicialitzar la biblioteca del Kerberos: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Sense suport per a la generació de les claus \"%s\".\n"
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr "Els tipus de claus conegudes inclouen:"
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Ús de clau no reconegut \"%s\".\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "No es pot avaluar l'OID \"%s\".\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 "S'ha produït un error en analitzar sintàcticament el nom del principal de "
 "Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 "S'ha produït un error en composar sintàcticament el nom del principal de "
 "Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr "%s: el valor no és vàlid -- '%s'\n"
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: l'opció requereix un argument -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: l'opció no és vàlida -- '%c'\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Error: argument extra \"%s\" sense utilitzar.\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Error: Es van subministrar arguments extra sense utilitzar.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 "La localització de la base de dades o el sobrenom s'ha especificat un sense "
 "l'altre.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 "S'han especificat ambdós, el directori de la base de dades i el fitxer del "
 "certificat.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -320,12 +517,12 @@ msgstr ""
 "No s'ha especificat cap directori de la base de dades i sobrenom o cap "
 "fitxer de certificat.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "La clau i el certificat no poden desar-se ambdós al mateix fitxer.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -334,292 +531,374 @@ msgstr ""
 "El motor IPA requereix l'ús de l'opció -K (nom del principal) quan "
 "s'utilitza l'opció -N (nom del subjecte).\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "No es va trobar cap AC amb el nom \"%s\".\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "S'ha produït un error en establir els arguments de la sol·licitud.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Es va afegir la nova sol·licitud de signatura \"%s\".\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "No es va poder afegir la nova sol·licitud de signatura.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Es va afegir la nova sol·licitud de seguiment \"%s\".\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "No es va poder afegir la nova sol·licitud de seguiment.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "No s'ha especificat cap Id. ni tampoc cap directori de la base de dades i el "
 "sobrenom o cap fitxer de certificat.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Es va modificar la sol·licitud \"%s\".\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "No es va poder modificar la sol·licitud \"%s.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "No s'ha trobat cap sol·licitud amb el sobrenom indicat.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "No s'ha trobat cap sol·licitud que coincideixi amb els arguments.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Es va eliminar la sol·licitud \"%s\".\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "No es va poder eliminar la sol·licitud \"%s\".\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "S'ha produït un error en modificar \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "S'està tornant a presentar \"%s\" a \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "S'està tornant a presentar \"%s\".\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "S'ha produït un error en intentar presentar \"%s\" a \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "S'ha produït un error en intentar presentar \"%s\".\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr "L'Id. de la sol·licitud '%s' que s'està refrescant.\n"
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr "L'Id. de la sol·licitud '%s' que NO s'està refrescant.\n"
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Número de certificats i de sol·licituds que s'estan seguint: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Id. de la sol·licitud '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\testat: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\terror-ac: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tbranca: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\temgatgatzematge parell clau: tupis=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "CAP"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",localització='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",sobrenom='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",mostra='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",fitxer-pin='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertificat: tipus=%s,localització='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr "\tempremta de sol·licitud de signatura (MD5): %s\n"
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr "\tempremta de sol·licitud de signatura (SHA1): %s\n"
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tAC: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\temissor: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsubjecte: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tvenç: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "desconegut"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\tcorreu electrònic: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tnom del principal: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr "\tadreça IP: "
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tús de la clau: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr "\tplantilla de certificat/perfil: %s\n"
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr "\tels certificats arrel s'han desat als fitxers:\n"
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr "\tels altres certificats arrel s'han desat als fitxers:\n"
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr "\tels altres certificats s'han desat als fitxers:\n"
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr "\tels certificats arrel s'han desat a les bases de dades:\n"
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr "\tels altres certificats arrel s'han desat a les bases de dades:\n"
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr "\tels altres certificats s'han desat a les bases de dades:\n"
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tordre abans de desar: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tordre després de desar: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tpista: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renova: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
@@ -628,250 +907,302 @@ msgstr ""
 "No s'ha especificat cap Id. ni tampoc cap directori de la base de dades i el "
 "sobrenom o cap fitxer de certificat.\n"
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "AC '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr "\tauto-identifica com: %s\n"
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttipus-ac: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tlocalització-ajudant: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tsegüent número de sèrie: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnoms d'emissors coneguts:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr "\tperfil/plantilla/tipus-certificat coneguts:\n"
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr "\tperfil/plantilla/tipus-certificat per defecte: %s\n"
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr "\tIdentificador de l'AC SCEP: %s\n"
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr "\tEmpremta del certificat de l'AC SCEP (MD5): %s\n"
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr "\tEmpremta del certificat de l'AC SCEP (SHA1): %s\n"
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr "No s'ha especificat ni el sobrenom de l'AC ni el marcador -a.\n"
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr "Les dades per a l'AC '%s' que s'estan refrescant.\n"
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr "Les dades per a l'AC sense nom que s'estan refrescant.\n"
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr "\ts'ha produït un error en refrescar les dades de l'AC\n"
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr "No s'ha especificat el sobrenom de l'AC,\n"
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr "No s'ha especificat l'ordre de l'ajudant de l'AC.\n"
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr "S'ha afegit la nova AC \"%s\".\n"
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr "No es va poder afegir la nova AC.\n"
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr "no s'ha especificat la URL del servidor.\n"
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr "HTTPS requereix un certificat de l'AC.\n"
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr "S'ha produït un error en la construcció de la línia d'ordres.\n"
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr "S'ha produït un error en establir l'identificador de l'AC.\n"
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr "S'ha modificat l'AC\"%s\".\n"
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr "No es va poder modificar l'AC.\n"
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr "S'ha eliminat l'AC \"%s\".\n"
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr "No es va poder eliminar l'AC.\n"
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - eina d'inscripció de certificats de client\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Ús: %s request [opcions]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Arguments requerits:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Si s'utilitza una base de dades NSS per a l'emmagatzematge:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tbase de dades NSS per a la clau i el certificat\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NOM\tsobrenom per a l'emmagatzematge basat en NSS (tan sols és vàlid "
 "amb -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NOM\tnom de mostra opcional per a l'emmagatzematge basat amb NSS (tan "
 "sols és vàlid amb -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Si s'utilitzen fitxers per a l'emmagatzematge:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FITXER\tfitxer PEM per a la clau privada\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FITXER\tfitxer PEM per al certificat (tan sols és vàlid amb -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Si s'han de xifrar les claus:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\tfitxer que conté el PIN de xifratge\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tvalor del PIN\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Arguments opcionals:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Ajustos del tractament del certificat:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NOM\tsobrenom a assignar a la sol·licitud\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 "  -G TIPUS\ttipus de clau que es generarà si encara no n'hi ha cap ja al seu "
 "lloc\n"
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g MIDA\tmida de la clau que es generarà si encara no n'hi ha cap ja al "
 "seu lloc\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tintenta de renovar el certificat quan s'apropi el venciment (per "
 "defecte)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tno intentis de renovar el certificat quan s'apropi el venciment\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c AC\t\tutilitza l'AC especificada en lloc de la predeterminada\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -879,479 +1210,497 @@ msgstr ""
 "  -T PERFIL\tpregunta a l'AC per processar la sol·licitud mitjançant el "
 "perfil o la plantilla amb nom\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Paràmetres per a la sol·licitud de signatura:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NOM\testableix el nom del subjecte sol·licitat (per defecte: CN=<nom-"
 "amfitrió>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U ÚSEXT\testableix l'OID de l'ús estès de la clau sol·licitat\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u ÚSCLAU\testableix l'ús de la clau sol·licitat\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NOM\testableix el nom del principal sol·licitat\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D NOMDNS\testableix el nom DNS sol·licitat\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E CORREU\testableix l'adreça de correu electrònic sol·licitada\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A ADREÇA\testableix l'adreça IP sol·licitada\n"
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr "  -l FITXER\tfitxer que conté la contrasenya d'un repte opcional\n"
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr "  -L CONTRASENYA\tcontrasenya d'un repte opcional\n"
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Opcions del bus:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tconnecta al servei certmonger sobre el bus del sistema\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tconnecta al servei certmonger sobre el bus de la sessió\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Altres opcions:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tordre a executar abans que es desi el certificat\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tordre a executar un cop es desi el certificat\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr "  -F\tfitxer on s'emmagatzemen els certificats de l'AC\n"
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr "  -a\tbase de dades NSS on s'emmagatzemen els certificats de l'AC\n"
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr "  -w\tprova d'esperar l'expedició del certificat\n"
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tinforma de tots els detalls dels errors\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Ús: %s start-tracking [opcions]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Si es modifica una sol·licitud existent:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NOM\tsobrenom d'una sol·licitud de seguiment existent\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Si les claus estan xifrades:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NOM\tsobrenom a donar a la sol·licitud de seguiment\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
-"* Paràmetres per a la sol·licitud de signatura en el moment de la "
-"renovació:\n"
+"* Paràmetres per a la sol·licitud de signatura en el moment de la renovació:"
+"\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U ÚSEXT\treemplaça l'OID de l'ús estès de la clau sol·licitat\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NOM\treemplaça el nom del principal sol·licitat\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D NOMDNS\treemplaça el nom DNS sol·licitat\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E CORREU\treemplaça l'adreça de correu electrònic sol·licitada\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A ADREÇA\treemplaça l'adreça IP sol·licitada\n"
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Ús: %s stop-tracking [opcions]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Per a l'identificador sol·licitat:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -I NOM\tsobrenom per seguir a la sol·licitud\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Ús: %s resubmit [opcions]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FITXER\tfitxer PEM per al certificat\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nous valors dels paràmetres per a la sol·licitud de signatura:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NOM\tnou sobrenom a donar a la sol·licitud de seguiment\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c AC\t\tutilitza l'AC especificada en lloc de l'actual\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Ús: %s list [opcions]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Opcions generals:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c AC\ttan sols llista les sol·licituds i els certificats que estiguin "
 "associats amb aquesta AC\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\ttan sols llista la informació sobre les sol·licituds pendents\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\ttan sols llista la informació sobre els certificats seguits\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Si es selecciona una sol·licitud específica:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR\ttan sols llista les sol·licituds i els certificats que utilitzin "
 "aquesta base de dades NSS\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NOM\ttan sols llista les sol·licituds i els certificats que utilitzin "
 "aquest sobrenom\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FITXER\ttan sols llista les sol·licituds i els certificats "
 "emmagatzemats en aquest fitxer PEM\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tconnecta al servei certmonger sobre el bus del sistema\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tconnecta al servei certmonger sobre el bus de la sessió\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr "Ús: %s refresh [opcions]\n"
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr "  -a\trefresca la informació sobre totes les sol·licituds pendents\n"
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr "Ús: %s status [opcions]\n"
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr "* Selecció d'una sol·licitud específica:\n"
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr "* Quan s'utilitzi una base de dades NSS per a l'emmagatzematge:\n"
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
-"  -d DIR\tretorna l'estat per a la sol·licitud en aquesta base de dades NSS\n"
+"  -d DIR\tretorna l'estat per a la sol·licitud en aquesta base de dades "
+"NSS\n"
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
-msgstr ""
-"  -n NOM\tretorna l'estat del certificat que utilitzi aquest sobrenom\n"
+msgstr "  -n NOM\tretorna l'estat del certificat que utilitzi aquest sobrenom\n"
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr "* Quan s'utilitzin fitxers per a l'emmagatzematge:\n"
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 "  -f FITXER\tretorna l'estat per al certificat emmagatzemat en aquest fitxer "
 "PEM\n"
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Ús: %s list-cas [opcions]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c AC\ttan sols llista la informació sobre l'AC amb aquest nom\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr "Ús: %s refresh-ca [opcions]\n"
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr "  -c AC\trefresca la informació sobre l'AC amb aquest nom\n"
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr "  -a\trefresca la informació sobre totes les AC conegudes\n"
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr "Ús: %s add-ca [opcions]\n"
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr "  -c AC\t\tsobrenom a donar a la nova configuració de l'AC\n"
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr "  -e ORDRE\tordre de l'ajudant a executar per comunicar-se amb l'AC\n"
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr "Ús: %s add-scep-ca [opcions]\n"
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr "  -u URL\tlocalització del servidor SCEP\n"
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr "  -i ID\t\tidentificador de l'AC\n"
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr "  -R FITXER\tfitxer que conté el certificat de l'AC\n"
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr "  -r FITXER\tfitxer que conté el certificat de la RA\n"
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 "  -I FITXER\tfitxer que conté els certificats a la cadena de certificació de "
 "la RA\n"
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr "Ús: %s modify-ca [opcions]\n"
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr "  -c AC\t\tsobrenom de la configuració de l'AC\n"
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 "  -e ORDRE\tordre de l'ajudant actualitzat a executar per comunicar-se amb "
 "l'AC\n"
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr "Ús: %s remove-ca [opcions]\n"
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr "  -c AC\tsobrenom de la configuració de l'AC a eliminar\n"
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr "Ús: %s ordre [opcions]\n"
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr "sol·licita un nou certificat des d'una AC\n"
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr "comença la monitorització d'un certificat ja expedit\n"
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr "atura la monitorització d'un certificat\n"
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 "tornar a presentar una sol·licitud d'inscripció en curs, o n'inicia un de "
 "nova\n"
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr "comprova l'estat d'una sol·licitud d'inscripció en curs\n"
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr "llista els certificats que s'estan monitoritzant i sol·licitant\n"
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 "comprova l'estat d'un certificat que s'està monitoritzant o sol·licitant\n"
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr "afegeix la configuració d'una AC\n"
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr "afegeix la configuració d'una AC SCEP\n"
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr "llista les configuracions de les AC conegudes\n"
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr "modifica la configuració d'una AC\n"
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr "refresca la memòria cau de tota la informació obtinguda d'una AC\n"
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr "elimina la configuració d'una AC\n"
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: no s'ha reconegut l'ordre\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr "No es pot determinar la localització del servidor LDAP IPA.\n"
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr "No es pot contactar amb el servidor LDAP IPA.\n"
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 "No es pot determinar el DN base de la informació de domini sobre el servidor "
 "IPA.\n"
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "S'ha produït un error en preparar-se per a l'XMLRPC sobre el client.\n"
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "L'opció -t no pot utilitzar-se amb l'opció -K.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "L'opció -k no pot utilitzar-se amb l'opció -K.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "L'opció -K no pot utilitzar-se amb l'opció -k ni amb l'opció -t.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
-"No es pot determinar el nom del principal per a la sol·licitud de "
-"signatura.\n"
+"No es pot determinar el nom del principal per a la sol·licitud de signatura."
+"\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr "No hi ha cap domini IPA configurat i no se n'ha especificat cap.\n"
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -1360,15 +1709,14 @@ msgstr ""
 "S'ha produït un error en preparar ccache per al servei \"host\" al client "
 "mitjançant la taula de claus predeterminada: %s.\n"
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 "S'ha produït un error en preparar ccache per a \"%s\" al client mitjançant "
 "la taula de claus predeterminada: %s.\n"
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -1377,71 +1725,135 @@ msgstr ""
 "S'ha produït un error en preparar ccache per al servei \"host\" al client "
 "mitjançant la taula de claus \"%s\": %s.\n"
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 "S'ha produït un error en preparar ccache per a \"%s\" al client mitjançant "
 "la taula de claus \"%s\": %s.\n"
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Ús: %s [-s|-S] [-n|-f] [-d NIVELL] [-p FITXER] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         utilitza el bus de la sessió\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         utilitza el bus del sistema\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr "\t-l         inicia un socket dedicat a escoltar\n"
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr "\t-L         tan sols utilitza el socket dedicat a escoltar\n"
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr "\t-P CAMÍ    especifica el socket dedicat a escoltar\n"
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         no et converteixis en un dimoni\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         converteix-te en un dimoni\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b TIMEOUT activat per bus, temps d'expiració d'inactivitat\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         no utilitzis un temps d'expiració d'inactivitat\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d NIVELL   estableix el nivell d depuració (implica -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr "\t-c ORDRE inicia l'ORDRE i surt quan també ho faci l'ordre.\n"
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p FITXER    escriu el PID del servei al fitxer\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         força NSS al mode FIPS\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "S'ha produït un error intern."
 
@@ -1454,30 +1866,30 @@ msgstr "No s'han trobat cap entrada que coincideixi.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Ja hi ha una AC amb el sobrenom \"%s\"."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "No s'ha especificat el tipus d'emmagatzematge de certificat,"
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "El tipus d'emmagatzematge de certificat \"%s\" no està suportat."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "La localització \"%s\" ha de ser un camí absolut."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr ""
 "No s'ha especificat la localització de l'emmagatzematge del certificat."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -1486,91 +1898,92 @@ msgstr ""
 "No es pot accedir a la localització pare \"%s\" a causa de permisos "
 "insuficients."
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "El pare de la localització \"%s\" ha de ser un directori vàlid."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "La localització \"%s\" ha de ser un fitxer."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 "No es pot accedir a la localització \"%s\" a causa de permisos insuficients."
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "La localització \"%s\" ha de ser un directori."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "No s'ha especificat el sobrenom del certificat."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Ja hi ha una sol·licitud amb el sobrenom \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "El certificat a la mateixa localització ja està utilitzat per la sol·licitud "
 "amb sobrenom \"%s\"."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "El tipus d'emmagatzematge de clau \"%s\" no està suportat."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "No s'ha especificat la localització de l'emmagatzematge de la clau."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "No s'ha especificat el sobrenom de la clau."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "La clau a la mateixa localització ja està utilitzada per la sol·licitud amb "
 "sobrenom \"%s\"."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Sense suport per al tipus de clau \"%s\"."
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "No existeix l'AC."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Autoritat de certificació \"%s\" no coneguda."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Paràmetre no reconegut o tipus de valor erroni."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr "S'ha produït un error en analitzar sintàcticament els arguments."
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr "Nom de propietat no reconeguda."
 
@@ -1585,4 +1998,5 @@ msgstr "Si us plau, verifiqueu que s'hagi iniciat el servei certmonger.\n"
 #: src/tdbusm.c:2160
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
-"Si us plau, verifiqueu que encara s'estigui executant el servei certmonger.\n"
+"Si us plau, verifiqueu que encara s'estigui executant el servei certmonger."
+"\n"
diff --git a/po/da.po b/po/da.po
index f83f90f..61bae88 100644
--- a/po/da.po
+++ b/po/da.po
@@ -1,132 +1,188 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Kris Thomsen <lakristho@gmail.com>, 2011
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Danish (http://www.transifex.com/projects/p/certmonger/"
 "language/da/)\n"
 "Language: da\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Kunne ikke bestemme værtsnavnet af CA.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Kunne ikke læse signeringsforespørgsel.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Fejl under opsætning af XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Fejl under fortolkning af serversvar.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Serverfejl.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Løbet tør for hukommelse.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr "Stien \"%s\" er ikke absolut, forsøger at bruge \"%s\" istedet.\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -135,174 +191,315 @@ msgstr ""
 "Stien \"%s\" er ikke absolut, og der opstod en fejl under bestemmelse af "
 "navnet på den nuværende mappe.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Stien \"%s\" er ikke en mappe.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "Stien \"%s\" er ikke en almindelig fil.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Kontrollér at tjenesten for beskedbussen (D-Bus) kører.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Fejl under oprettelse af forespørgselsbesked for DBus.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Fejl %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Fejl %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Fejl: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Modtog fejlrespons fra lokal tjeneste %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Intet svar modtaget fra tjenesten %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Fejl under initialisering af Kerberos-biblioteket: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Kunne ikke evaluere OID \"%s\".\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kunne ikke fortolke hovednavn for Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kunne ikke aftolke hovednavn for Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Fejl: ubrugte ekstra-argumenter blev angivet.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Databaseplacering eller kaldenavn angivet uden den anden.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Databasemappe og certifikatfil er begge angivet.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr "Ingen databasemappe og kaldenavn eller certifikat-fil angivet.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Nøgle og certifikat kan ikke blive gemt i den samme fil.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -311,1080 +508,1294 @@ msgstr ""
 "IPA-motoren kræver brug af tilvalget -K (hovednavn), når tilvalget -N "
 "(emnenavn) er brugt.\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Ingen CA med navnet \"%s\" fundet.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Fejl under indstilling af forespørgselsargumenter.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Ny signeringsforespørgsel \"%s\" tilføjet.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Ny signeringsforespørgsel kunne ikke tilføjes.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Ny sporingsforespørgsel \"%s\" tilføjet.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Ny sporingsforespørgsel kunne ikke tilføjes.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Intet ID eller databasemappe og -kaldenavn eller certifikatfil angivet.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Forspørgsel \"%s\" ændret.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Forespørgsel \"%s\" kunne ikke ændres.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Ingen forespørgsel fundet, som matchede argumenter.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Forespørgsel \"%s\" fjernet.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Forespørgsel \"%s\" kunne ikke fjernes.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Fejl under ændring af \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Gensender \"%s\" til \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Gensender \"%s\".\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Fejl under forsøg på sending \"%s\" til \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Fejl under forsøg på sending \"%s\".\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Antallet af certifikater og forespørgsler som spores: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Forespørgsels-id \"%s\":\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tstatus: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-fejl: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tsat fast: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>lagring for nøglepar: "
 "type=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "INGEN"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",placering='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",kaldenavn='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",symbol='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfil='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
-"<span class=\"whitespace other\" title=\"Tab\">»</span>certifikat: type=%s,"
-"placering='%s'"
+"<span class=\"whitespace other\" title=\"Tab\">»</span>certifikat: type="
+"%s,placering='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tudsteder: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\temne: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tudløber: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "ukendt"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\te-post: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\thovednavn: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tspor: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-forny: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA \"%s\":\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-type: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\thjælperplacering: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tnæste serienummer: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tkendte udstedernavne:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - udrulningsværktøj for klientcertifikat\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Brug: %s forespørgsel [tilvalg]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Påkrævede argumenter:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Hvis der bruges en NSS-database til lagring:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d MAPPE\tNSS-database for nøgle og certifikat\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr "  -n NAVN\tkaldenavn for NSS-baseret lagring (kun gyldig med -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAVN\tvalgfri symbolnavn til NSS-baseret lagring (kun gyldig med -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Hvis filer bruges til lagring:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FIL\tPEM-fil til privat nøgle\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FIL\tPEM-fil til certifikat (kun gyldig med -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Hvis nøgler skal krypteres:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FIL\tfilen som indeholder krypterings-PIN\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN-værdi\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Valgfri argumenter:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Indstillinger for certifikathåndtering:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAVN\tkaldenavn at tillægge forespørgslen\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g STØRRELSE\tstørrelsen på nøglen som skal genereres hvis der ikke "
 "allerede findes en\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tforsøg at forny certifikatet når udløbsdatoen er nær (standard)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr "  -R\t\tforsøg ikke at forny certifikatet når udløbsdatoen er nær\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tbrug den angivne CA i stedet for standarden\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parametre til signeringsforespørgsel:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N NAVN\tangiv forespurgt emnenavn (standard: CN=<værtsnavn>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTBRUG\tangiv forespurgt udvidet nøglebrug OID\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAVN\tangiv forespurgt hovednavn\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAVN\tangiv forespurgt DNS-navn\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E E-POST\tangiv forespurgt e-post-adresse\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Busindstillinger:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tforbind til certmonger-tjenesten i systembussen\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tforbind til certmonger-tjenesten i sessionsbussen\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Andre tilvalg:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 "  -v<span class=\"whitespace other\" title=\"Tab\">»</span>rapportér alle "
 "deltaljer om fejl\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Brug: %s start-sporing [tilvalg]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Hvis en eksisterende forespørgsel redigeres:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAVN\tkaldenavn for eksisterende fulgt forespørgsel\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Hvis nøgler er krypteret:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAVN\tkaldenavn at give til fulgt forespørgsel\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parametre til signeringsforespørgsel ved fornyelsestidspunkt:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTBRUG\toverskriv forespurgt udvidet nøglebrug OID\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAVN\toverskriv forespurgt hovednavn\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAVN\toverskriv forespurgt DNS-navn\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E E-POST\toverskriv forespurgt e-post-adresse\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Brug: %s stop-sporing [tilvalg]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Efter forespørgselsidentifikator:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAVN\tkaldenavn for fulgt forespørgsel\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Brug: %s resubmit [tilvalg]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FIL\tPEM-fil til certifikat\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nye parameterværdier til signering af forespørgsel:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAVN\tnyt kaldenavn at give til fulgt forespørgsel\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tbrug den angivne CA i stedet for den nuværende\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Brug %s list [tilvalg]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Generelle tilvalg:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
-msgstr ""
-"  -c CA\tvis kun forespørgsler og certifikater forbundet med denne CA\n"
+msgstr "  -c CA\tvis kun forespørgsler og certifikater forbundet med denne CA\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tvis kun information om specielle forespørgsler\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tvis kun information om fulgte certifikater\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Hvis en specifik forespørgsel vælges:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d MAPPE<span class=\"whitespace other\" title=\"Tab\">»</span>oplister "
 "kun forespørgsler og certs som bruger denne NSS-database\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAVN<span class=\"whitespace other\" title=\"Tab\">»</span>oplister kun "
 "forespørgsler og certs som bruger dette kaldenavn\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FIL<span class=\"whitespace other\" title=\"Tab\">»</span>oplister kun "
 "forespørgsler og certs, som er gemt i denne PEM-fil\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tforbind til tjenesten certmonger i systembussen\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tforbind til tjenesten certmonger i sessionsbussen\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Brug: %s vis-cas [tilvalg]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\tvis kun information om CA'et med dette navn\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: ukendt kommando\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Kunne ikke bestemme hovednavn for signeringsforespørgsel.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr ""
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr ""
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr ""
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr ""
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr ""
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr ""
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr ""
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Der opstod en intern fejl."
 
@@ -1397,115 +1808,116 @@ msgstr "Intet matchende element fundet.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Der er allerede en CA med kaldenavnet \"%s\"."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Certifikatslagringstype er ikke angivet."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Certifikatslagringstype \"%s\" er ikke understøttet."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Placeringen \"%s\" skal være en absolut sti."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Certifikatslagringsplacering er ikke angivet."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Placeringen over \"%s\" skal være en gyldig mappe."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Placeringen \"%s\" skal være en fil."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Placeringen \"%s\" skal være en mappe."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Certifikatkaldenavn ikke angivet."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Der er allerede en forespørgsel med kaldenavnet \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Nøglelagringstype \"%s\" er ikke understøttet."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "Nøglelagringsplacering er ikke angivet."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Nøglekaldenavn er ikke angivet."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Ingen sådan CA."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Certifikatsautoritet \"%s\" er ikke kendt."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Ikke opdaget parameter eller forkert værditype."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/de.po b/po/de.po
index 5194316..8c85173 100644
--- a/po/de.po
+++ b/po/de.po
@@ -1,7 +1,7 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Fabian Affolter <fab@fedoraproject.org>, 2014
 # hpeters <hpeters@redhat.com>, 2012
@@ -10,128 +10,184 @@
 # Roman Spirgi <bigant@fedoraproject.org>, 2012-2013
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: German (http://www.transifex.com/projects/p/certmonger/"
 "language/de/)\n"
 "Language: de\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 "Rechnername der Zertifizierungsstelle (CA) konnte nicht ermittelt werden.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Signaturanfrage konnte nicht gelesen werden.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Fehler beim Einrichten von XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Fehler beim Abfragen der Serverantwort.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Server-Fehler.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Ungenügend Speicher.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr "Keine Agent-URL (-T) angegeben, Standarwert nicht gesetzt.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr "Keine End-Entity-URL (-T) angegeben, Standarwert nicht gesetzt.\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr "Keine Agent-URL (-T) angegeben, Standarwert nicht gesetzt.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Kein Profil/ Vorlage (-T) angegeben, Standarwert nicht gesetzt.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Interner Fehler: Unbekannter Status.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "%d-Fehler beim Verbinden zu %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Fehler %d connecting to %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Interner Fehler: Keine Antwort an \"%s?%s\".\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr "Pfad »%s« ist nicht absolut, versuche stattdessen »%s« zu verwenden.\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -140,178 +196,319 @@ msgstr ""
 "Pfad »%s« ist nicht absolut. Außerdem trat beim Ermitteln des Namens des "
 "aktuellen Ordners ein Fehler auf.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Pfad »%s« ist kein Verzeichnis.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Pfad »%s«: %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "Pfad »%s« ist keine reguläre Datei.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Bitte überprüfen Sie, ob der D-Bus-Dienst läuft.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Fehler beim Erstellen der D-Bus-Anfragemeldung.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Fehler %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Fehler %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Fehler: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Fehlermeldung erhalten vom lokalen Dienst %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Keine Antwort vom %s-Dienst erhalten.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Fehler bei der Initialisierung der Kerberos-Bibliothek: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Unbekannte SchlüsselBenutzung »%s«.\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "OID »%s« konnte nicht ermittelt werden.\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fehler beim Parsen des Principal-Namens »%s« für Kerberos: %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fehler beim Unparsen des Principal-Namens »%s« für Kerberos: %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: Option erfordert einen Parameter -- »%c«\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: ungültige Option -- »%c«\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Fehler: unbenötigter, zusätzlicher Parameter »%s«.\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Fehler: unbenötigte, zusätzliche Parameter wurden angegeben.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Ort der Datenbank oder Kurzname allein angegeben.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 "Sowohl Datenbankordner als auch Zertifikatdatei wurden nicht angegeben.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 "Weder Datenbankordner noch Kurzname oder Zertifikatdatei wurden angegeben.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "Schlüssel und Zertifikat können nicht in der gleichen Datei gespeichert "
 "werden.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -320,540 +517,673 @@ msgstr ""
 "Das IPA-Backend benötigt die Option -K (Name des Principals), wenn die "
 "Option -N (Name des Subjekts) verwendet wird.\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Keine Zertifizierungsstelle mit dem Namen »%s« gefunden.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Fehler beim Setzen der Anfrageparameter.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Neue Signaturanfrage »%s« wurde hinzugefügt.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Neue Signaturanfrage konnte nicht hinzugefügt werden.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Neue Überwachungsanfrage »%s« wurde hinzugefügt.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Neue Überwachungsanfrage konnte nicht hinzugefügt werden.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Kennung, Datenbankordner, Kurzname und Zertifikatdatei nicht angegeben.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Anfrage »%s« wurde geändert.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Anfrage »%s« konnte nicht geändert werden.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Keine Anfrage mit angegebenem Kurznamen gefunden.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Keine mit den Parametern übereinstimmende Anfrage gefunden.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Anfrage »%s« wurde entfernt.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Anfrage »%s« konnte nicht entfernt werden.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Fehler beim Bearbeiten von »%s«.\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "»%s« erneut an »%s« übertragen.\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "»%s« erneut übertragen.\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Fehler beim Versuch, »%s« an »%s« zu übertragen.\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Fehler beim Versuch, »%s« zu übertragen.\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Anzahl der Zertifikate und überwachten Anfragen: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Anfragekennung »%s«:\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tStatus: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tCA-Fehler: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tstecken geblieben: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tSchlüsselpaar-Speicher: Typ=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "NICHTS"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",Ort=»%s«"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",Kurzname=»%s«"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",Token=»%s«"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",PIN=»%s«"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",PIN-Datei=»%s«"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tZertifikat: Typ=%s, Ort=»%s«"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tAusgabestelle: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tSubjekt: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tAblauf: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "unbekannt"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\tE-Mail: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tDNS: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tPrincipal-Name: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
-msgstr ""
-"Schlüsselbenutzung: %s\n"
+msgstr "Schlüsselbenutzung: %s\n"
 "\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\tEKU: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "»Befehl vor dem Speichern: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "»Befehl nach dem Speichern: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tTrack: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tAuto-Erneuern: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA »%s«:\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tCA-Typ: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tHelper-Speicherort: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tNächste Seriennummer: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tBekannte Ausstellernamen:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - Tool z. Client-Zertifikatanmeldung\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Aufruf: %s request [Optionen]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Benötigte Parameter:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Falls in einer NSS-Datenbank gespeichert wird:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tNSS-Datenbank für Schlüssel und Zertifikat\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr "  -n NAME\tKurzname für NSS-basierte Speicherung (nur gültig mit -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAME\toptionaler Token-Name für NSS-basierte Speicherung (nur gültig "
 "mit -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Falls Dateien zum Speichern verwendet werden:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k DATEI\tPEM-Datei für geheimen Schlüssel\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f DATEI\tPEM-Datei für Zertifikat (nur gültig mit -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Falls Schlüssel verschlüsselt werden sollen:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p DATEI\tDatei, welche die Verschlüsselungs-PIN enthält\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN-Wert\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Optionale Parameter:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Einstellungen für Umgang mit Zertifikaten:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME\tder Anfrage zuzuordnender Kurzname\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g GRÖSSE\tGröße des zu generierenden Schlüssels, falls noch keiner "
 "vorhanden ist\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tversuchen, kurz vor Ablauf das Zertifikat zu erneuern (Standard)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -r\t\tnicht versuchen, kurz vor Ablauf das Zertifikat zu erneuern "
 "(Standard)\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 "  -c CA\tAngegebene Zertifizierungsstelle statt der aktuellen verwenden\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -861,552 +1191,633 @@ msgstr ""
 "  -T PROFILE\tAnfrage an CA, um den Antrag unter Verwendung des benannten "
 "Profils oder der Vorlage auszuführen\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parameter für die Signaturanfrage:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAME\tAngefragten Subjektnamen festlegen (Standard: CN=<hostname>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\tAngefragte OID für erweiterte Schlüsselverwendung festlegen\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
-msgstr ""
-"  -u SCHLÜSSELNUTZUNG\tGewünschter Wert für SchlüsselBenutzung setzen\n"
+msgstr "  -u SCHLÜSSELNUTZUNG\tGewünschter Wert für SchlüsselBenutzung setzen\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME\tAngefragten Principal-Namen festlegen\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAME\tAngefragten DNS-Namen festlegen\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\tAngefragte E-Mail-Adresse festlegen\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Busoptionen:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tmit dem Certmonger-Dienst über den Systembus verbinden\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -S\t\tmit dem Certmonger-Dienst über den Sitzungsbus verbinden\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Weitere Optionen:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr " -B»Auszuführender Befehl vor dem Speichern des Zertifikats\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr " -C\tAuszuführender Befehl nach dem Speichern des Zertifikats\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tAlle Fehlerdetails ausgeben\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Aufruf: %s start-tracking [Optionen]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Falls eine existierende Anfrage geändert wird:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME\tKurzname für existierende Überwachungsanfrage\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Falls Schlüssel verschlüsselt sind:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME\tNeuer Kurzname für die Überwachungsanfrage\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parameter für die Signaturanfrage zum Zeitpunkt der Erneuerung:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\tAngefragte OID für erweiterte Schlüsselverwendung "
 "überschreiben\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME\tangefragten Principal-Name überschreiben\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\tangefragten DNS-Namen überschreiben\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\tangefragte E-Mail-Adresse überschreiben\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Aufruf: %s stop-tracking [Optionen]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Nach Anfrage-Kennung:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME\tKurzname für Überwachungsanfrage\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Aufruf: %s resubmit [Optionen]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f DATEI\tPEM-Datei des Zertifikats\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Neue Parameterwerte für die Signaturanfrage:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\tNeuer Kurzname für die Überwachungsanfrage\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 "  -c CA\t\tAngegebene Zertifizierungsstelle statt der aktuellen verwenden\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Aufruf: %s list [Optionen]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Allgemeine Optionen:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\tNur die dieser Zertifizierungsstelle zugeordneten Anfragen und "
 "Zertifikate auflisten\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tNur Informationen zu offenen Anfragen auflisten\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tNur Informationen zu überwachten Zertifikaten auflisten\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Falls bestimmte Anfrage ausgewählt wird:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d VERZ\tnur Anfragen und Zertifikate auflisten, die diese NSS-Datenbank "
 "nutzen\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAME\tnur Anfragen und Zertifikate auflisten, die diesen Kurznamen "
 "nutzen\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f DATEI\tnur Anfragen und Zertifikate auflisten, die in dieser PEM-Datei "
 "gespeichert sind\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tmit dem Certmonger-Dienst über den Systembus verbinden\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -S\tmit dem Certmonger-Dienst über den Sitzungsbus verbinden\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Aufruf: %s list-cas [Optionen]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
-"  -c CA\tNr Informationen zu Zertifizierungsstellen dieses Namens auflisten\n"
+"  -c CA\tNr Informationen zu Zertifizierungsstellen dieses Namens "
+"auflisten\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: Unbekannter Befehl.\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 "Die -t Option kann nicht zusammen mit der -K Option verwendet werden.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 "Die -k Option kann nicht zusammen mit der -K Option verwendet werden.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 "Die -K Option kann weder mit der -k noch der -t Option verwendet werden.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Principal-Name für Signaturanfrage konnte nicht ermittelt werden.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Benutzung: %s [-s|-S] [-n|-f] [-d STUFE] [-p DATEI] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         Sitzungs-Bus verwenden\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         System-Bus verwenden\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         nicht als Dämon ausführen\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         als Dämon ausführen\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b TIMEOUT bus-aktiviert, Timeout der Leerlaufzeit\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         kein Timeout der Leerlaufzeit verwenden\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d LEVEL   Debugging-Stufen setzen (impliziert -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p FILE    Dienst-PID in Datei schreiben\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         NSS in FIPS-Modus ausführen\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Ein interner Fehler ist aufgetreten."
 
@@ -1419,119 +1830,120 @@ msgstr "Kein passender Eintrag gefunden.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Es gibt bereits ein Zertifikat mit dem Kurznamen »%s«."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Speichertyp des Zertifikats wurde nicht angegeben."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Speichertyp »%s« des Zertifikats wird nicht unterstützt."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Der Ort »%s« muss ein absoluter Pfad sein."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Speicherort für Zertifikat ist nicht angegeben."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Übergeordnete Ebene des Ortes »%s« muss ein gültiger Ordner sein."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Der Ort »%s« muss eine Datei sein."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Der Ort »%s« muss ein Ordner sein."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Kurzname des Zertifikats nicht angegeben."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Es gibt bereits eine Anfrage mit dem Kurznamen »%s«."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Zertifikat am gleichen Speicherort wird bereits von Anfrage mit Kurznamen "
 "»%s« verwendet."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Speichertyp »%s« für Schlüssel nicht unterstützt."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "Speicherort des Schlüssels wurde nicht angegeben."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Kurzname des Schlüssels nicht angegeben."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Schlüssel am gleichen Speicherort wird bereits von Anfrage mit Kurznamen "
 "»%s« verwendet."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Keine solche Zertifizierungsstelle."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Zertifizierungsstelle »%s« ist unbekannt."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Nicht erkannter Parameter oder falscher Werttyp."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/es.po b/po/es.po
index ed209c1..20e6acc 100644
--- a/po/es.po
+++ b/po/es.po
@@ -1,7 +1,7 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Claudio Rodrigo Pereyra Diaz <elsupergomez@gmail.com>, 2011, 2012
 # Daniel Cabrera <logan@fedoraproject.org>, 2011
@@ -15,132 +15,185 @@
 # Nalin Dahyabhai <nalin@fedoraproject.org>, 2011
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Spanish (http://www.transifex.com/projects/p/certmonger/"
 "language/es/)\n"
 "Language: es\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "No es posible determinar el nombre del equipo de CA.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "No es posible leer la petición de identificación.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Error al definir XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Error analizando la respuesta del servidor.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Error de servidor.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Falta memoria.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
-msgstr ""
-"Sin URL agente (-A) dada, y no hay conocido por defecto\n"
+msgstr "Sin URL agente (-A) dada, y no hay conocido por defecto\n"
 "\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr "Se solicitó renovación, pero no se indicó númerio de serie.\n"
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr "Sin URL de entidad final (-E) dada, y no hay conocida por defecto\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
-msgstr ""
-"Sin URL agente (-A) dada, y no hay conocido por defecto\n"
+msgstr "Sin URL agente (-A) dada, y no hay conocido por defecto\n"
 "\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Sin pérfil/plantilla (-T) dado, y no hay conocido por defecto\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr "Error al apagar NSS\n"
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Error interno: estado desconocido.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "Error %d conectando a %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Error %d conectando a %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Error interno: no hay respuesta para \"%s?%s\".\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
-msgstr ""
-"La dirección \"%s\" no es absoluta, intentando usar \"%s\" en su lugar.\n"
+msgstr "La dirección \"%s\" no es absoluta, intentando usar \"%s\" en su lugar.\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -149,170 +202,311 @@ msgstr ""
 "La ruta \"%s\" no es absoluta, y hubo un error al determinar el nombre del "
 "directorio actual.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr "Ruta \"%s\": permisos insuficientes.\n"
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "La dirección \"%s\" no es un directorio.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Ruta \"%s\": %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "La dirección \"%s\" no es un archivo común.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr "Ningún bus del sistema se está ejecutando.\n"
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr "Ejecutando como UID 0.\n"
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr "Iniciando temporalmente un demonio de servicio dedicado.\n"
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr "Error conectándose a D-Bus.\n"
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
 "Por favor verifique que el servicio de bus de mensajes (D-Bus) se encuentre "
 "funcionando.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Error creando mensaje de petición DBus.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Error %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Error %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Error: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Se ha recibido una respuesta de erro desde el servicio %s local.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "No se ha recibido una respuesta desde el servicio %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr "Estado %s, pendiente: %s.\n"
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Erro al inicializar la biblioteca Kerberos: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Sin soporte para generar las llaves \"%s\"\n"
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr "Los tipos de llaves conocidos incluyen:"
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "keyUsage \"%s\" no reconocido.\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "No se pudo evaluar OID \"%s\".\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Error analizando el nombre  \"%s\"del principal de Kerberos: %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 "Error al dejar de analizar el nombre \"%s\" del principal de Kerberos: %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr "%s: valor inválido -- '%s'\n"
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: opción requiere un argumento -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: opción no valida -- '%c'\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Error: argumento extra no utilizado \"%s\".\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Error: se enviaron argumentos extra no usados.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 "La ubicación de la base de datos, o el apodo, han sido indicados el uno sin "
 "el otro.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 "Han sido especificados el directorio de la base de datos y el archivo de "
 "certificado.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -320,14 +514,14 @@ msgstr ""
 "No han sido especificados ni el directorio de la base de datos, ni el apodo "
 "del archivo de certificado.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
-"La llave y el certificado no pueden ambos ser guardados en un mismo "
-"archivo.\n"
+"La llave y el certificado no pueden ambos ser guardados en un mismo archivo."
+"\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -336,549 +530,680 @@ msgstr ""
 "El motor de IPA necesita la utilización de la opción -K (el nombre del "
 "principal) cuando se esté utilizando la opción -N (el nombre del asunto).\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "No se ha encontrado un CA con el nombre \"%s\".\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Error al definir los argumentos de la petición.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Ha sido agregada una nueva petición \"%s\" de identificación.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Ha se ha podido agregar la nueva petición de identificación.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Nueva solicitud de seguimiento \"%s\" agregada.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Nueva solicitud de seguimiento no puede ser agregada.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "No se ha especificado ningún ID, o directorio de base de datos y apodo, o "
 "archivo de certificado.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Solicitud \"%s\" modificada.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Solicitud \"%s\" no puede ser modificada.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "No han sido halladas peticiones con el alias indicado.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "No se encontraron solicitudes que coincidan con los argumentos.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Solicitud \"%s\" eliminada.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "La solicitud \"%s\" no pudo ser eliminada.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Error modificando \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Reenviando \"%s\" to \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Reenviando \"%s\".\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Error intentando enviar \"%s\" hacia \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Error intentando enviar \"%s\".\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr "Petición de ID '%s' se está refrescando.\n"
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr "Petición de ID '%s' NO se está refrescando.\n"
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 "Cantidad de peticiones y certificados que están siendo rastrados: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID de solicitud '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\testado: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-error: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tstuck: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>par de clave "
 "almacenada: tipo=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "NINGUNO"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",ubicación='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",usuario='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",archivopin='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
-"<span class=\"whitespace other\" title=\"Tab\">»</span>certificado: tipo=%s,"
-"ubicación='%s'"
+"<span class=\"whitespace other\" title=\"Tab\">»</span>certificado: tipo="
+"%s,ubicación='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tgenerador: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tasunto: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\texpira: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "desconocido"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\tcorreo electrónico: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tnombre del principal: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr "⇥Dirección IP:"
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
-msgstr ""
-"\tutilización de clave: %s\n"
+msgstr "\tutilización de clave: %s\n"
 "\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr "⇥certificados raíz guardados en un archivo:\n"
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr "⇥otros certificados raíz guardados en un archivo:\n"
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr "⇥otros certificados guardados en un archivo:\n"
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr "⇥certificados raíz guardados en la base de datos:\n"
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr "⇥otros certificados raíz guardados en la base de datos:\n"
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr "⇥otros certificados guardados en la base de datos:\n"
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tcomando de almacenado previo: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tcomando de almacenado posterior: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttrack: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto renovación: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr "auto-identificado como: %s\n"
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttipo de tca: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tubicación del asistente: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tnúmero de serie siguiente: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnombres de generadores conocidos:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr "known profiles/templates/certtypes:\n"
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr "default profile/template/certtype: %s\n"
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr "Ningún apodo CA y ningúna bandera -a especificada.\n"
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr "Datos para CA '%s' se están refrescando.\n"
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr "Datos para CA innombrados están refrescándose.\n"
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr "error refrescando los datos CA\n"
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s . herramienta de inscripción de certificado de cliente\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Utilización: petición %s [opciones]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Argumentos requeridos:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 "* si se está utilizando para el almacenamiento una base de datos NSS:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tbase de datos NSS para la llave y el certificado\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAME\tapodo para el almacenamiento basado en NSS (sólo valido con -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAME\tnombre opcional de la ficha para el almacenamiento basado en NSS "
 "(sólo valido con -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* si se están utilizando archivos para el almacenamiento:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE\tarchivoPEM para la llave privada\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE\tarchivo PEM para el certificado (sólo válido con -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* si la llaves serán cifradas:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\tarchivo que contiene el PIN de cifrado\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tvalor del PIN\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Argumentos opcionales:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Configuración de la manipulación del certificado:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME\tapodo a ser asignado a la petición\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
-msgstr ""
-"-G TYPE⇥tipo de llave a ser generada si no hay alguna en su lugar\n"
+msgstr "-G TYPE⇥tipo de llave a ser generada si no hay alguna en su lugar\n"
 "\n"
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
-msgstr ""
-"  -g SIZE\ttamaño de la llave a ser generada si aún no existe ninguna\n"
+msgstr "  -g SIZE\ttamaño de la llave a ser generada si aún no existe ninguna\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tintento de renovación del certificado cuando el momento de "
 "expiración esté próximo (predeterminado)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tno intentar renovar el certificado cuando el momento de expiración "
 "esté próximo\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tutilizar el CA indicado en lugar del predeterminado\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -886,477 +1211,495 @@ msgstr ""
 "  -T PROFILE\tpide a CA el proceso de la solicitud utilizando el perfil o el "
 "modelo invocado\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parámetros para la petición de identificación:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
-"  -N NAME\tdefine el nombre del asunto solicitado (predeterminado: "
-"CN=<nombre del equipo>)\n"
+"  -N NAME\tdefine el nombre del asunto solicitado (predeterminado: CN="
+"<nombre del equipo>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\tdefine  la utilización OID de la extensión de la llave "
 "solicitada\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
-msgstr ""
-"  -u KEYUSAGE\tfijado el valor de utilzación de clave pedido\n"
+msgstr "  -u KEYUSAGE\tfijado el valor de utilzación de clave pedido\n"
 "\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME\tdefine el nombre del principal solicitado\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAME\tdefine el nombre DNS solicitado\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\tdefine la dirección de correo electrónico solicitada\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A ADDRESS⇥define la dirección IP solicitada\n"
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Opciones de Bus:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tconectar al servicio certmonger en el bus del sistema\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tconectar al servicio certmonger en el bus de sesión\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Otras opciones:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tcomando a ejecutar antes de guardar el certificado\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tcomando a ejecutar luego de guardar el certificado\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr "-F archivo en el cual almacenar los certificados CA\n"
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr "-a base de datos en la cual almacenar los certificados CA\n"
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr "-w intenta esperar que los certificados sean emitidos\n"
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 "  -v<span class=\"whitespace other\" title=\"Tab\">»</span>informar todos "
 "los detalles de errores\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Utilización: %s iniciar seguimiento [opciones]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Si se está modificando una petición existente:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME\tnombre de apodo de una petición de seguimiento existente\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Si las llaves se encuentran cifradas:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME\tapodo a darle a la petición de seguimiento\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 "* Parámetros para la solicitud de firma en el momento de la renovación:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\treemplazar la utilización de llave extendida OID solicitada\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME\treemplazar el nombre principal solicitado\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\treemplazar el nombre DNS solicitado\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\treemplazar la dirección de correo electrónico solicitada\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A ADDRESS⇥remplazar la dirección IP solicitada\n"
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Utilziación: %s detener seguimiento [opciones]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Por identificador de petición:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME\tapodo de la petición de seguimiento\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Utilización: %s volver a enviar [opciones]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE\tarchivo PEM del certificado\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nuevos valores de los parámetros de la petición de identificación:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\tnuevo apodo a darle a la petición de seguimiento\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tutilizar el CA indicado en lugar del actual\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Utilización: %s lista [opciones]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Opciones generales:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
-"  -c CA\tlista sólo las peticiones y los certificados asociados con este CA\n"
+"  -c CA\tlista sólo las peticiones y los certificados asociados con este "
+"CA\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tlista sólo la información acerca de peticiones destacadas\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tlista sólo información acerca de certificados en seguimiento\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Si selecciona un pedido específico:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR<span class=\"whitespace other\" title=\"Tab\">»</span> sólo lista "
 "los pedidos y certificados que usa esta base de datos NSS\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NOMBRE<span class=\"whitespace other\" title=\"Tab\">»</span>sólo lista "
 "los pedidos y certificados que usan este apodo\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f ARCHIVO <span class=\"whitespace other\" title=\"Tab\">»</span>sólo "
 "lista los pedidos y certificados guardados en este archivo PEM\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tconectar con el servicio certmonger en el bus del sistema\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tconectar con el servicio certmonger en el bus de la sesión\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr "Uso: %s refrescar [opciones]\n"
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr "Uso: %s estado [opciones]\n"
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr "* Seleccione una petición específica\n"
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr "* cuando se usa una base de datos NSS para almacenamiento\n"
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 "-d DIR devuelve el estado para las peticiones en esta base de datos NSS\n"
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr "-n NOMBRE devuelve el estado para cert que usa este apodo\n"
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr "* cuando se usan archivos para almacenamiento:\n"
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 "-f ARCHIVO devuelve el estado para cert almacenado en este archivo PEM\n"
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Utilización: %s list-cas [opciones]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 "  -c CA\tlista sólo la información de este nombre relacionada con el CA\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr "Uso: %s refresh-ca [opciones]\n"
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr "-c CA refresca la información acerca de los CA con este nombre\n"
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: comando no reconocido\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr "No es posible determinar la ubicación del servidor IPA LDAP\n"
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 "No es posible determinar la base DN de el dominio de en el servidor IPA\n"
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "Error configurando para XMLRPC en el cliente\n"
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "La opción -t no puede ser utilizada junto con la opción -K.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "La opción -k no puede ser utilizada junto con la opción -K.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 "La opción -K no puede ser utilizada junto con la opción -k, ni con la opción "
 "-t.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 "No es posible determinar el nombre del principal para la petición de "
 "identificación.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -1365,15 +1708,14 @@ msgstr ""
 "Error definiendo ccache para el servicio del \"equipo\" utilizando el keytab "
 "predeterminado: %s.\n"
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 "Error definiendo ccache para \"%s\" en el cliente utilizando el keytab "
 "predeterminado: %s.\n"
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -1382,73 +1724,136 @@ msgstr ""
 "Error definiendo ccache para el servicio del \"equipo\" en el cliente "
 "utilizando el keytab \"%s\": %s\n"
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
-"Error definiendo ccache para \"%s\" en el cliente utilizando el keytab \"%s"
-"\": %s.\n"
+"Error definiendo ccache para \"%s\" en el cliente utilizando el keytab "
+"\"%s\": %s.\n"
+
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
 
-#: src/main.c:137
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Utilización: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         usar session bus\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         usar system bus\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         no se convierta en demonio\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         conviértase en demonio\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b TIMEOUT bus-activated, tiempo de inactividad \n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         no usar un tiempo de inactividad \n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d LEVEL   establecer nivel de depuración (implica -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p FILE    escribir servicio PID al archivo \n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
-msgstr ""
-"\t-F         forzar NSS en modo FIPS\n"
+msgstr "\t-F         forzar NSS en modo FIPS\n"
 "\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Ha ocurrido un error interno."
 
@@ -1461,30 +1866,29 @@ msgstr "No se ha encontrado una entrada coincidente.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Ya existe un CA con el apodo \"%s\"."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "No ha sido especificado el tipo de certificado de almacenamiento."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
-msgstr ""
-"No existe soporte para el tipo \"%s\" de certificado de almacenamiento."
+msgstr "No existe soporte para el tipo \"%s\" de certificado de almacenamiento."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "La ubicación \"%s\" debe ser una ruta absoluta."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "No ha sido indicada una ubicación del certificado de almacenamiento."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -1493,91 +1897,92 @@ msgstr ""
 "El padre de la ubicación \"%s\" no pudo ser accesado debido a permisos "
 "insuficientes."
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "El paterno de la ubicación \"%s\" debe ser un directorio válido."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "La ubicación \"%s\" debe ser un archivo."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 "La ubicación \"%s\" no pudo ser accesada debido a permisos insuficientes."
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "La ubicación \"%s\" debe ser un directorio."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "No ha sido especificado un apodo de certificado."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Ya existe una petición con el apodo \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Un certificado en la misma ubicación ya está siendo utilizado por la "
 "petición hecha con el alias \"%s\"."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "No existe soporte para el tipo \"%s\" de llave de almacenamiento."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "No ha sido especificada una ubicación de la llave."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "No ha sido especificado un apodo de llave."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Una llave en la misma ubicación ya está siendo utilizada por la petición "
 "hecha con el alias \"%s\"."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Sin soporte para tipo de llave %s\"."
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "No existe el CA."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "No se conoce la autoridad \"%s\" del certifiicado. "
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Parámetro irreconocible o tipo de valor erróneo."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr "Error analizando argumentos."
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr "Nombre de propiedad no reconocido."
 
diff --git a/po/eu.po b/po/eu.po
index bc7c9c8..3cec606 100644
--- a/po/eu.po
+++ b/po/eu.po
@@ -1,1368 +1,1780 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Asier Iturralde Sarasola <asier.iturralde@gmail.com>, 2012
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Basque (http://www.transifex.com/projects/p/certmonger/"
 "language/eu/)\n"
 "Language: eu\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr ""
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Zerbitzariaren errorea.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr ""
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
 msgstr ""
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr ""
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr ""
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr ""
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Errorea %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Errorea %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Errorea: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr ""
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "ezezaguna"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Beharrezko argumentuak:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Hautazko argumentuak:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Beste aukerak:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Aukera orokorrak:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr ""
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr ""
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr ""
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr ""
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr ""
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr ""
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr ""
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -1375,115 +1787,116 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/fr.po b/po/fr.po
index c11403f..48a4fdb 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -1,7 +1,7 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # dominique bribanick <chepioq@gmail.com>, 2012
 # Gé Baylard <geodebay@gmail.com>, 2014
@@ -10,135 +10,191 @@
 # Kévin Raymond <shaiton@fedoraproject.org>, 2012
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: French (http://www.transifex.com/projects/p/certmonger/"
 "language/fr/)\n"
 "Language: fr\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 "Impossible de déterminer le nom d'hôte de l'autorité de certification.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Impossible de lire la signature de la demande.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Erreur lors de la configuration de XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Erreur d'analyse de la réponse du serveur.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Erreur du serveur.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Mémoire saturée.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 "Aucune URL d'agent spécifiée (-A), et aucune valeur par défaut connue.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr "Renouvellement demandé, mais numéro de série manquant.\n"
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 "Aucune URL d'entité finale spécifiée (-E), et aucune valeur par défaut "
 "connue.\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 "Aucune URL d'agent spécifiée (-A), et aucune valeur par défaut connue.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 "Aucune profil ou patron spécifié (-T), et aucune valeur par défaut connue.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr "Erreur lors de l'arrêt de NSS.\n"
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Erreur interne : état inconnu.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "Erreur %d lors de la connexion à %s : %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Erreur %d lors de la connexion à %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Erreur interne : pas de réponse à « %s?%s ».\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 "Le chemin « %s » n'est pas absolu, tentative d'utilisation de « %s » à la "
 "place.\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -147,169 +203,310 @@ msgstr ""
 "Le chemin d'accès « %s » n'est pas absolu, et il y a une erreur pour "
 "déterminer le nom du répertoire courant.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr "Chemin « %s » : permissions insuffisantes.\n"
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Le chemin « %s » n'est pas un répertoire.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Chemin « %s » : %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "Le chemin « %s » n'est pas un fichier régulier.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
 "Veuillez vérifier que le service bus de messages (D-Bus) est en cours "
 "d'exécution.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Erreur de création du message de demande de DBus.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Erreur %s : %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Erreur %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Erreur : %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Un message d'erreur a été reçu du service local %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Pas de réponse du service %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr "État %s, bloqué : %s.\n"
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Erreur lors de l'initialisation de la bibliothèque Kerberos : %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Absence de prise en charge de la création de clés « %s ».\n"
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr "Les types de clés connus incluent :"
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Utilisation de la clé « %s » inconnue.\\n\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Impossible d'évaluer OID « %s ».\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Erreur lors de l'analyse du nom principal Kerberos « %s » : %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 "Erreur lors de la récupération du nom principal Kerberos « %s » : %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr "%s : valeur invalide -- '%s'\n"
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s : cette option requiert un argument -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s : -- '%c' est une option invalide\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Erreur : l'argument supplémentaire « %s » est inutilisé.\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Erreur : des arguments supplémentaires inutilisés ont été fournis.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 "Un élément est manquant entre le nom de la base de données ou son nom.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 "Le répertoire de la base de données et le fichier de certificat ont été "
 "spécifiés.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -317,14 +514,14 @@ msgstr ""
 "Aucun répertoire de base de données, nom ou fichier de certificat n'ont été "
 "spécifiés.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "Les clés et les certificats ne peuvent être tous les deux enregistrés dans "
 "le même répertoire.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -333,541 +530,675 @@ msgstr ""
 "Le backend IPA requiert l'utilisation de l'option -K (nom principal) si "
 "l'option -N (nom d'objet) est utilisée.\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Pas d'autorité de certification avec le nom « %s » trouvé.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Erreur de paramétrage des arguments.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Nouvelle demande de signature de « %s » ajoutée.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "La nouvelle demande de signature n'a pas pu être ajoutée.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Nouvelle demande de suivi « %s » ajoutée.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "La nouvelle demande de suivi n'a pas pu être ajoutée.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Aucun ID ou répertoire de base de données ni de nom ou fichier de certificat "
 "spécifié.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Demande « %s » modifiée.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "La demande « %s » ne peux être modifiée.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Aucune demande trouvée avec le nom spécifié.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Aucune demande ne correspond aux arguments.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Demande « %s » suprimée.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Demande « %s » n'a pas pu être enlevée.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Erreur lors de la modification de « %s ».\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Nouvelle soumission de « %s » à « %s ».\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Nouvelle soumission de « %s ».\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Erreur en tentant de soumettre « %s » à « %s ».\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Erreur en tentant de soumettre « %s ».\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Le numéro des certificats et les demandes qui seront suivis : %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID de la demande « %s » :\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tétat : %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\terreur-ac : %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tbloqué : %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tpaire de clés de stockage : modèle = « %s »"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "Aucun"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ", emplacement = « %s »"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ", nom = « %s »"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ", jeton = « %s »"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ", pin = « %s »"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ", fichier pin = « %s »"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertificat : modèle = « %s », emplacement = « %s »"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tAutorité de certification : %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\témetteur : %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsujet : %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\texpiration : %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "inconnu"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\te-mail : "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns : "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tnom principal : "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr "\tAdresse IP : "
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tusage de la clé : %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku : "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr "\tcertificats racine enregistrés sur fichiers :\n"
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr "\tautres certificats racine enregistrés sur fichiers :\n"
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr "\tautres certificats enregistrés sur fichiers :\n"
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr "\tcertificats racine enregistrés sur bases de données :\n"
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr "\tautres certificats racine enregistrés sur bases de données :\n"
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr "\tautres certificats enregistrés sur bases de données :\n"
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tcommande de pré-sauvegarde : %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tcommande de post-sauvegarde : %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tchemin : %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renouvellement : %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "Autorité de certification « %s » :\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr "\tauto-identification en tant que : %s\n"
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttype-ac : %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\templacement-de-l'-aide : %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tprochain-numéros-de-série : %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnoms-des-problèmes-identifiés :\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr "\tprofils/modèles/types de certificats connus :\n"
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr "\tprofils/modèles/types de certificats par défaut : %s\n"
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr "\terreur lors du rafraîchissement des données du CA\n"
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - outil d'inscription du certificat client\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Utilisation : %s request [options]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Arguments requis :\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Si vous utilisez une base de données NSS pour le stockage :\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d RÉPERTOIRES\tNSS base de données pour les clés et certificats\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NOM\tsurnom pour le stockage NSS-base (valide uniquement avec -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NOM\tnom de jeton optionel pour le stockage NSS-base (valide uniquement "
 "avec -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Si vous utilisez des fichiers de stockage :\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FICHIER\tPEM fichier pour une clé privée\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FICHIER\tPEM fichier du certificat (valide uniquement avec -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Si les clés sont à chiffrer :\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FICHIER\tfichier qui contient le code PIN de chiffrement\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tvaleur PIN\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Arguments optionnels :\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Paramètres de gestion du certificat :\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NOM\tnom à attribuer à la demande\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr "  -G TYPE\ttype de la clé à créer si aucune n'existe déjà\n"
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g TAILLE\ttaille de la clé à générer si elle n'est pas déjà en place\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\ttente de renouveler le certificat lorsque l'expiration approche (par "
 "défaut)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tne pas tenter de renouveler le certificat lorsque l'expiration "
 "approche\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 "  -c AC\t\tutiliser l'autorité de certification spécifié, plutôt que celui "
 "par défaut\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -875,469 +1206,488 @@ msgstr ""
 "  -T PROFIL\tinterroger le CA pour traiter la requête en utilisant le profil "
 "nommé ou le modèle\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Paramètres de la requête de signature :\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NOM\tdéfinit le nom du sujet demandé (par défaut: CN=<nom d'hôte>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\tdéfinit l'étendu de l'utilisation d'une clé OID demandé\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u USAGECLÉ\tconfigure la valeur requise d'usage de la clé\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NOM\tdéfinit le nom principal demandé\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D NOMDNS\tdéfinit le nom DNS demandé\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\tdéfinit l'adresse e-mail demandé\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A ADRESSE\tdéfinit l'adresse IP demandée\n"
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Options du Bus :\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tconnecte le service certmonger sur le bus système\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tconnecte le service certmonger sur le bus de session\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Autres options :\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tcommande à lancer avant de sauvegarder le certificat\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tcommande à lancer après avoir sauvegardé le certificat\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr "  -F\tfichier de stockage des certificats de CA\n"
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr "  -a\tbase de données NSS d'enregistrement des certificats de CA\n"
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\trapporte tous les détails des erreurs\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Utilisation : %s start-tracking [options]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Si vous modifiez une requête existante :\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NOM\tnom d'une demande de suivi existante\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Si les clés sont chiffrées :\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NOM\tnom à donner à la demande de suivi\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 "* Paramètres de la requête de signature au moment du renouvellement :\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\toutrepasse la requête d'utilisation d'une clé OID étendue\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NOM\toutrepasse le nom principal demandé\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D NOMDNS\toutrepasse le nom DNS demandé\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\toutrepasse l'adresse e-mail demandée\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A ADRESSE\toutrepasse l'adresse IP demandée\n"
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Utilisation : %s stop-tracking [options]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* En identifiant la demande :\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NOM\tnom pour suivre la demande\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Utilisation : %s resubmit [options]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FICHIER\tfichier PEM pour le certificat\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nouvelle valeur du paramètre pour la demande de signature :\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NOM\tnouveau nom à donner à la demande de suivi\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
-"  -c AC\t\tutilise l'autorité de certification spécifié plutôt que l'actuel\n"
+"  -c AC\t\tutilise l'autorité de certification spécifié plutôt que "
+"l'actuel\n"
+
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
 
-#: src/getcert.c:4256
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Utilisation : %s list [options]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Options générales :\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c AC\tliste seulement les requêtes et les certificats associés à une "
 "autorité de certification\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tliste seulement l'information des demandes en attente\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tliste seulement l'information des certificats suivis\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Si vous sélectionnez une requête spécifique : \n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR\tn'afficher que les requêtes et certificats utilisant cette base de "
 "données NSS\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAME\tn'afficher que les requêtes et certificats utilisant ce pseudo\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FILE\tn'afficher que les requêtes et certificats stockés dans ce "
 "fichier PEM\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tconnecte le service certmonger sur le bus système\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tconnecte le service certmonger sur le bus de session\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr "Utilisation : %s status [options]\n"
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Utilisation : %s list-cas [options]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 "  -c AC\tliste seulement les informations à propos de l'autorité de "
 "certification avec ce nom\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr "Utilisation : %s refresh-ca [options]\n"
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr "  -c CA\trafraîchir l'information du CA de ce nom\n"
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s : commande inconnue\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr "Impossible de déterminer l'emplacement du serveur LDAP IPA.\n"
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 "Impossible de déterminer le DN de base des informations de domaine sur le "
 "serveur IPA.\n"
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "Erreur lors de la configuration de XMLRPC sur le client.\n"
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "L'option -t ne peut pas être utilisée avec l'option -K.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "L'option -k ne peut pas être utilisée avec l'option -K.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "L'option -K ne peut pas être utilisée avec les options -k ni -t.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 "Impossible de déterminer le nom principal pour la signature demandée.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -1346,15 +1696,14 @@ msgstr ""
 "Erreur de mise en place du ccache pour le service « hôte » sur le client "
 "utilisant le jeu declés par défaut : %s.\n"
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 "Erreur de mise en place du ccache pour « %s » sur le client en utilisant le "
 "jeu de clés par défaut : %s.\n"
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -1363,71 +1712,135 @@ msgstr ""
 "Erreur de mise en place du ccache pour le service « hôte » en utilisant le "
 "jeu de clés « %s » : %s.\n"
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 "Erreur de mise en place du ccache pour « %s » sur le client en utilisant le "
 "jeu de  clés « %s » : %s.\n"
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Syntaxe&nbsp;: %s [-s|-S] [-n|-f] [-d NIVEAU] [-p FICHIER] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         utiliser le bus de la session\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         utiliser le bus du système\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         ne pas se transformer en démon\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         devenir un démon\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b délai d'attente du bus activé, durée d'inactivité\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         ne pas utiliser un délai d'inactivité\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d NIVEAU   définir le niveau de débogage (nécessite -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p FICHIER     écrire le PID du service dans un fichier\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         impose le mode FIPS à NSS\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Une erreur interne s'est produite."
 
@@ -1440,29 +1853,29 @@ msgstr "Aucune correspondance trouvées.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Il existe déjà une autorité de certification avec le nom « %s »."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Type de stockage de certificat non spécifié."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Le type de certificat « %s » n'est pas pris en charge."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "L'emplacement « %s » doit être un chemin absolu."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Emplacement de stockage de certificat non spécifié."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -1471,19 +1884,19 @@ msgstr ""
 "L'emplacement parent de « %s » n'est pas accessible du fait de permissions "
 "insuffisantes."
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "L'emplacement principal « %s » doit être un répertoire valide."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "L'emplacement « %s » doit être un fichier."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
@@ -1491,68 +1904,69 @@ msgstr ""
 "L'emplacement « %s » n'est pas accessible du fait de permissions "
 "insuffisantes."
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "L'emplacement « %s » doit être un répertoire."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Nom du certificat non spécifié."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Il existe déjà une demande avec le nom « %s »."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr "Le certificat est déjà utilisé par une requête avec le nom « %s »."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Stockage de clés de type « %s » n'est pas pris en charge."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "Emplacement de stockage de clé non spécifié."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Nom de la clé non spécifié."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr "La clé est déjà utilisé par une requête avec le nom « %s »."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Absence de prise en charge des clés de type « %s »."
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Aucune autorité de certification."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "L'autorité de certification « %s » non connue."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Paramètre inconnu ou type de valeur incorrecte."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr "Erreur lors de l'analyse des arguments."
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr "Nom de propriété inconnu."
 
diff --git a/po/gu.po b/po/gu.po
index 192328a..4045586 100644
--- a/po/gu.po
+++ b/po/gu.po
@@ -1,1368 +1,1780 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # sweta <swkothar@redhat.com>, 2011
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Gujarati (http://www.transifex.com/projects/p/certmonger/"
 "language/gu/)\n"
 "Language: gu\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "CA નાં યજમાનનામને નક્કી કરવાનું અસમર્થ.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "XMLRPC માટે સુયોજિત કરતી વખતે ભૂલ.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "સર્વર ભૂલ.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr ""
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
 msgstr ""
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr ""
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr ""
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "મહેરબાની કરીને ખાતરી કરો કે સંદેશા બસ (D-Bus) સેવા ચાલી રહી છે.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr ""
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "ભૂલ %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "ભૂલ %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "ભૂલ: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr ""
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "નામ \"%s\" સાથે CA મળ્યુ નથી.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tસ્થિતિ: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tવિષય: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "અજ્ઞાત"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\tઇમેલ: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tટ્રેક: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "જરૂરી દલીલો:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN કિંમત\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "વૈકલ્પિક દલીલો:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* બસ વિકલ્પો:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Usage: %s list [options]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* સામાન્ય વિકલ્પો:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr ""
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr ""
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr ""
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr ""
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr ""
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr ""
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr ""
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "આંતરિક ભૂલ ઉદ્ભવી."
 
@@ -1375,115 +1787,116 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "પ્રમાણપત્ર સંગ્રહ પ્રકાર સ્પષ્ટ થયેલ નથી."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "પ્રમાણપત્ર સંગ્રહ પ્રકાર \"%s\" આધારભૂત નથી."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "પ્રમાણપત્ર સંગ્રહ સ્થાન સ્પષ્ટ થયેલ નથી."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "સ્થાન \"%s\" ફાઇલ હોવી જ જોઇએ."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "સ્થાન \"%s\" ડિરેક્ટરી હોવી જ જોઇએ."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "પ્રમાણપત્ર ઉપનામ સ્પષ્ટ થયેલ નથી."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "કી સંગ્રહ પ્રકાર \"%s\" આધારભૂત નથી."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "કી સંગ્રહ સ્થાન સ્પષ્ટ થયેલ નથી."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "કી ઉપનામ સ્પષ્ટ થયેલ નથી."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/hu.po b/po/hu.po
index 406d157..c709112 100644
--- a/po/hu.po
+++ b/po/hu.po
@@ -1,138 +1,194 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Peter Borsa <peter.borsa@gmail.com>, 2012
 # Zoltan Hoppár <zoltanh721@fedoraproject.org>, 2012-2013
 # Porcsin László <dzsolly85@gmail.com>, 2015. #zanata
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2015-02-22 02:25-0500\n"
 "Last-Translator: Porcsin László <dzsolly85@gmail.com>\n"
 "Language-Team: Hungarian (http://www.transifex.com/projects/p/certmonger/"
 "language/hu/)\n"
 "Language: hu\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "CA hosztnevének meghatározása meghiúsult.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Bejelentkezési kérés olvasása meghiúsult.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Hiba történt a XMLRPC-re történő beállításkor\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Hiba a szerver válasz értelmezésében.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Szerver hiba.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Elfogyott a rendelkezésre álló memória.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr "Nincs ágens URL megadva (-A), és nincs ismert alapértelmezett sem.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 "Nincs végentitású URL megadva (-E), és nincs ismert alapértelmezett sem.\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr "Nincs ágens URL megadva (-A), és nincs ismert alapértelmezett sem.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 "Nincs profil / sablon megadva (-T), és nincs ismert alapértelmezett sem.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Belső hiba: ismeretlen állapot.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "Hiba: %d csatlakozik ide - %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Hiba: %d csatlakozik ide - %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Belső hiba: nincs válasz erre - \"%s?%s\".\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
-"\"%s\" elérési út nem abszolút, próbaként \"%s\" kerül alkalmazásra "
-"helyette.\n"
+"\"%s\" elérési út nem abszolút, próbaként \"%s\" kerül alkalmazásra helyette."
+"\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -141,165 +197,305 @@ msgstr ""
 "\"%s\" elérési út nem abszolút, és hiba történt a jelenlegi könyvtár "
 "meghatározásakor.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "\"%s\" elérési út nem egy szabályos könyvtár.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr " \"%s\" elérési útja: %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "\"%s\" elérési út nem egy szabályos fájl.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Kérem ellenőrizze, hogy az üzenet busz (D-Bus) szolgáltatás működik.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Hiba történt a a DBus kérési üzenet elkészítésekor.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Hiba %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
-msgstr ""
-"Hiba %s\n"
+msgstr "Hiba %s\n"
 "\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Hiba %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Hiba érkezett egy helyi %s szolgáltatástól.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Nincs válasz a következő szolgáltatástól: %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Hiba történt a Kerberos modul beállításakor: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Felismerhetetlen kulcshasználat \"%s\".\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Nem értelmezhető OID \"%s\".\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Hiba a Kerberos megbízói név értelmezésekor \"%s\": %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Hiba a Kerberos megbízói név visszafordításakor \"%s\": %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: az opcióhoz szükséges egy paraméter is -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: érvénytelen opció --'%c'\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "HIba: kihasználatlan extra paraméter \"%s\".\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Hiba: használaton kívüli extra paraméterek is alkalmazásra kerültek.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Adatbázis helye vagy elnevezése egymás nélkül vannak meghatározva.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Adatbázis könyvtára és az aláírás fájl meghatározva.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -307,12 +503,12 @@ msgstr ""
 "Sem az adatbázis könyvtára és az elnevezése, vagy az aláírás fájl nincs "
 "meghatározva.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "A kulcs és az aláírás nem menthető el egy ugyanazon fájlba.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -321,1124 +517,1324 @@ msgstr ""
 "Az IPA backend-nek szükséges a -K opció (megbízói név) ha az -N opció (tárgy "
 "név) alkalmazásban van.\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Nincs elérhető CA \"%s\" néven.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Hiba a paraméterek kérésekor.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Új aláírási kérelem \"%s\" hozzáadva.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Új aláírási kérelem nem adható hozzá.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Új nyomkövetési kérés \"%s\" hozzáadva.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Új nyomkövetési kérés nem adható hozzá.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Sem az ID vagy adatbázis könyvtára és az elnevezése, vagy az aláírás fájl "
 "sincsen meghatározva.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "\"%s\" kérés módosult.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "\"%s\" kérés nem módosítható.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Nem található kérés a megadott elnevezéssel.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Olyan kérés nem található ami egyezne a paraméterekkel.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "\"%s\" kérés eltávolítva.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "\"%s\" kérés nem távolítható el.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "\"%s\" módosításakor hiba lépett fel.\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "\"%s\" újraküldése ide: \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Újraküldés: \"%s\".\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Nem sikerült \"%s\" beküldése ide: \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "\"%s\" beküldése sikertelen.\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "A nyomonkövetett kérések és aláírások száma: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID kérése: '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>status: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-error: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>beragadt: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tkulcspár tároló: típusa=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "NINCS"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",helye='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",elnevezés='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",jegy='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfájl='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\ttanusítvány: típusa=%s,helye='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>CA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>issuer: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>subject: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
-msgstr ""
-"<span class=\"whitespace other\" title=\"Tab\">»</span>lejárati idő: %s\n"
+msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>lejárati idő: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "ismeretlen"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>email: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>dns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>megbízó neve: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tkulcshasználat: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>eku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tpre-mentés parancs: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tpost-mentés parancs: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>track: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
-"<span class=\"whitespace other\" title=\"Tab\">»</span>automatikus "
-"megújítás: %s\n"
+"<span class=\"whitespace other\" title=\"Tab\">»</span>automatikus megújítás:"
+" %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-típus: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
-msgstr ""
-"<span class=\"whitespace other\" title=\"Tab\">»</span>segítő-helye: %s\n"
+msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>segítő-helye: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
-"<span class=\"whitespace other\" title=\"Tab\">»</span>következő "
-"sorozatszám: %s\n"
+"<span class=\"whitespace other\" title=\"Tab\">»</span>következő sorozatszám:"
+" %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>ismert kibocsátó "
 "nevek:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - kliens tanusítvány felvevő eszköz\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Használata: %s kérés [opciók]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Szükséges paraméterek:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
-msgstr ""
-"* Ha egy NSS adatbázist használ a tárolóhoz:\n"
+msgstr "* Ha egy NSS adatbázist használ a tárolóhoz:\n"
 "\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 "  -d DIR<span class=\"whitespace other\" title=\"Tab\">»</span>NSS adatbázis "
 "a kulcshoz és a tanusítványhoz\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAME<span class=\"whitespace other\" title=\"Tab\">»</span>elnevezés az "
 "NSS-alapú tárolóhoz (csak -d opcióval érvényes)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAME\topcionális token név az NSS-alapú tárolókhoz (csak a -d opcióval "
 "érvényes)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Ha a fájlokat a tárolásra használja:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE\tPEM fájl a privát kulcshoz\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE\tPEM fájl az aláíráshoz (csak a -k opcióval érvényes)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Ha a kulcsok titkosításra kerülnek:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\tfájl ami a titkosító PIN-t tartalmazza\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN értéke\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Opcionális paraméterek:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Aláírás ezeket a beállításokat kezeli:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME\telnevezés amelyet hozzárendelhetünk az igényléshez\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g SIZE\taz előállítandó kulcs mérete ha egy már nem lenne a helyén\n"
 "\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tmegkísérlés a bizonyítvány megújítására ha a lejárati idő közeledik "
 "(alapértelmezett)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tne kísérelje meg a bizonyítvány megújítását ha a lejárati idő "
 "közeledik\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
-msgstr ""
-"  -c CA\t\tinkább alkalmazza a megadott CA mint az alapértelmezettet\n"
+msgstr "  -c CA\t\tinkább alkalmazza a megadott CA mint az alapértelmezettet\n"
 "\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 "  -T PROFILE\task CA számítás a kért felhasznált profil név vagy sablon\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Paraméterek az aláírási igényléshez:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
-"  -N NAME \tigényelt tárgy nevének beállítása (alapértelmezett: "
-"CN=<hosztnév>)\n"
+"  -N NAME \tigényelt tárgy nevének beállítása (alapértelmezett: CN="
+"<hosztnév>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
-msgstr ""
-"  -U EXTUSAGE\tigényelt kibővített kulcs használatának beállítása OID\n"
+msgstr "  -U EXTUSAGE\tigényelt kibővített kulcs használatának beállítása OID\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\tbeállítja a kért kulcshasználati értéket\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "-K NAME\tigényelt elsődleges név beállítása \n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "- D DNSNAME\tigényelt DNS név beállítása\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "-E MAIL \tigényelt email cím beállítása\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Adatcsatorna opciók:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "-S\t\tconnect certmonger szolgáltatásnál a rendszer buszon \n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "-s\t\tconnect certmonger szolgáltatásnál a szál vezérélésnél \n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Egyéb opciók:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "-B\tcommand futtatás előtt a tanúsítványt menti \n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "-C\tcommand futtatás után a tanúsítványt menti \n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tjelentse az összes hibarészletet\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Használata: %s nyomon követés [opciók]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Ha módosítanak egy létező kérést:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME\tnickname of an existing tracking request\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Ha a kulcsok titkosítottak:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME\telnevezés a nyomonkövetési kéréshez\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
-msgstr ""
-"* Paraméterek az aláírási kéréshez megújításkor:\n"
+msgstr "* Paraméterek az aláírási kéréshez megújításkor:\n"
 "\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\tfelülírja a kért kibővített kulcs használat OID-jét\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
-msgstr ""
-"  -K NAME\tfelülírja a kért elsődleges nevet\n"
+msgstr "  -K NAME\tfelülírja a kért elsődleges nevet\n"
 "\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\tfelülírja a kért DNS nevet\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
-msgstr ""
-"  -E EMAIL\tfelülírja a kért email címet\n"
+msgstr "  -E EMAIL\tfelülírja a kért email címet\n"
 "\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Használata: %s stop-tracking [opciók]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Kérés azonosítója alapján:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME\telnevezés a nyomonkövetési kéréshez\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Használata: %s újraküldése [opciók]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE\tPEM fájl az aláírásért\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Új paraméter értékek az aláírási kérelemhez:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\túj név megadása a nyomonkövetési kéréshez\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\talkalmazza a megadott CA-t jelenlegi helyett \n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Használata: %s listázása [opciók]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Általános opciók:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\tcsak azokat a kéréseket és bizonytványokat listázza amelyek ezzel a "
 "CA-val vannak kapcsolatban\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tcsak a kiemelkedő kérésekről szóló információkat listázza\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
-msgstr ""
-"  -t\tcsak a nyomonkövetett bizonytványok adatait listázza\n"
+msgstr "  -t\tcsak a nyomonkövetett bizonytványok adatait listázza\n"
 "\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Ha kiválaszt egy specifikus igénylést:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR\tcsak olyan igényléseket és bizonyítványokat listáz amelyek ezt az "
 "NSS adatbázist használják\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAME\tcsak olyan igényléseket és bizonyítványokat listáz amelyek ezt az "
 "elnevezést használják\n"
 "\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FILE\tcsak olyan igényléseket és bizonyítványokat listáz amelyek "
 "tárolásra kerültek ebben a PEM fájlban\n"
 "\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tkapcsolja össze a certmonger szolgáltatást a rendszer bus-al\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
-msgstr ""
-"  -s\tkapcsolja össze a certmonger szolgáltatást a session bus-al\n"
+msgstr "  -s\tkapcsolja össze a certmonger szolgáltatást a session bus-al\n"
 "\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Alkalmazás: %s list-cas [opciók]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 "  -c CA\tcsak az ezzel a névvel rendelkező CA tanúsítvány információit "
 "listázza\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
-msgstr ""
-"%s: ismeretlen parancs\n"
+msgstr "%s: ismeretlen parancs\n"
 "\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "A -t opció nem használható a _K opcióval együtt.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "A -k opció nem használható a -K opcióval együtt.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "A -K opció nem használható a -k vagy a -t opcióval sem.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Meghatározhatatlan az elsődleges neve az aláírási igénylésnek.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Használata: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         szálvezérlés használata\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
-msgstr ""
-"\t-S         rendszerbusz használata\n"
+msgstr "\t-S         rendszerbusz használata\n"
 "\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         művelet ne váljon daemonná\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         művelet váljon daemonná\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
-msgstr ""
-"\t-b TIMEOUT busz-vezérelt, várakozási idővel\n"
+msgstr "\t-b TIMEOUT busz-vezérelt, várakozási idővel\n"
 "\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
-msgstr ""
-"\t-B         várakozási idő elhagyása\n"
+msgstr "\t-B         várakozási idő elhagyása\n"
 "\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d LEVEL   hibakeresési szint beállítása (ez azt jelenti: -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
-msgstr ""
-"\t-p FILE    szolgáltatás PID rögzítése fájlba\n"
+msgstr "\t-p FILE    szolgáltatás PID rögzítése fájlba\n"
 "\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         eröltesse az NSS-t FIPS módba\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Belső hiba történt."
 
@@ -1451,124 +1847,125 @@ msgstr "Nincs egyező bejegyzés.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Már szerepel egy CA ezzel a névvel: \"%s\"."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Bizonyítvány tároló típusa nem definiált."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "\"%s\" típusú bizonyítványtároló enm támogatott."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "A hely \"%s\" abszolút elérési útnak kell lennie."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Bizonyítványok tárolási helye nincs meghatározva."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "\"%s\" szülő könyvtárnak létező mappának kell lennie."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "\"%s\" egy fájlnak kell lennie."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "\"%s\" egy könyvtárnak kell lennie."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Bizonyítvány elnevezése nincs definiálva."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Már van egy igénylés ezzel a névvel: \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Tanúsítvány ugyanazt a helyet használja amit a becenévnél igényelt \"%s\"."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "\"%s\" kulcstároló típus nem támogatott."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "Kulcstároló helye nem definiált."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Kulcs elnevezés nem meghatározott."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr "Kulcs ugyanazt a helyet használja amit a becenévnél igényelt \"%s\"."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Nincs ilyen CA."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "\"%s\" nevű tanúsítvány hatóság nem ismert."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Ismeretlen paraméter, vagy rossz értéktípus."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
 #: src/tdbusm.c:2153
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
-"Elégtelen hozzáférési jog. Kérem ismételje meg a műveletet "
-"rendszergazdaként.\n"
+"Elégtelen hozzáférési jog. Kérem ismételje meg a műveletet rendszergazdaként."
+"\n"
 
 #: src/tdbusm.c:2157
 msgid "Please verify that the certmonger service has been started.\n"
diff --git a/po/id.po b/po/id.po
index 80e05d1..7414ea5 100644
--- a/po/id.po
+++ b/po/id.po
@@ -1,132 +1,188 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Nalin Dahyabhai <nalin@fedoraproject.org>, 2011
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Indonesian (http://www.transifex.com/projects/p/certmonger/"
 "language/id/)\n"
 "Language: id\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "tidak dapat menentukan nama host dari CA.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Tidak dapat membaca tanda permintaan.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Setting kesalahan untuk XMLRPC\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "merespon pelayanan penguraian kesalahan.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Kesalahan server.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr ""
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -135,163 +191,304 @@ msgstr ""
 "Path \"%s\"tidak mutlak, dan ada eror yang menentukan nama dari sebuah "
 "direktori.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr ""
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr ""
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "permintaan pesan Eror penciptaan DBus.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Error %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Error %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Error: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Menerima respon eror dari lokal %s layanan.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Tidak menerima respon dari %s layanan.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Menginisialisasi Kesalahan Kerberos : %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Tidak dapat mengevaluasi OID\"%s\".\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kesalahan menguraikan nama utama Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kesalahan tanpa menguraikan nama utama Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Lokasi database atau nama panggilan khusus tanpa yang lain. \n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Direktori database dan sertifikat file kedua secara khusus.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -299,13 +496,13 @@ msgstr ""
 "Tidak ada dari direktori database dan nama panggilan atau sertifikat berkas "
 "khusus.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "Kunci dan sertifikat tidak dapat di simpan seluruhnya pada file yang sama.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -314,1072 +511,1287 @@ msgstr ""
 "IPA kembali memerlukan kegunaan dari pilihan -K (nama utama) di mana ketika "
 "pilihan -N (nama subjek) telah digunakan.\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Tidak ada CA dengan nama \"%s\"menemukan.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Pengaturan kesalahan permintaan beberapa argumen.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Menandai permintaan baru \"%s\" yang di tambah.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Menandai permintaan baru yang tidak dapat ditambahkan.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Permintaan pelacakan di tambahkan \"%s\"added.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Permintaan pelacakan tidak dapat di tambahkan.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "ID kosong atau direktori database dan nama panggilan atau sertifikat berkas "
 "khusus.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Permintaan \"%s\" memodifikasi.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Permintaan \"%s\" tidak dapat dimodifikasi.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Tidak menemukan permintaan mengenai argumen yang cocok.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Permintaan \"%s\" menghapus.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Permintaan \"%s\" tidak dapat menghapus.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Modifikasi eror \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Pengajuan kembali \"%s\" to \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Pengajuan kembali \"%s\".\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Usaha eror untuk di ajukan \"%s\"untuk \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Usaha eror untuk di ajukan \"%s\".\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID de solicitud '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tstatus: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-error: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tstuck: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tissuer: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsubject: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\texpires: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "Tidak diketauhui"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\temail: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tprincipal name: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttrack: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renew: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "AC '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-type: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\thelper-location: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tnext-serial-number: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tknown-issuer-names:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - sertifikat pendaftaran pelanggan\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Pemakaian: %s request[options]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Argumentasi yang di butuhkan:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "*Jika menggunakan database NSS untuk menyimpan:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "-d DIR\tNSS database untuk kunci dan pemastian\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
-msgstr ""
-"-n NAME\tnickname untuk dasar penyimpanan NSS (hanya valid dengan -d)\n"
+msgstr "-n NAME\tnickname untuk dasar penyimpanan NSS (hanya valid dengan -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "-t NAME\toptional tanda nama untuk dasar penyimpanan NSS (hanya valid dengan "
 "-d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "*Jika menggunakan berkas untuk penyimpanan:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "-k FILE\tPEM berkas untuk kunci privasi\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "-f FILE\tPEM berkas untuk sertifikat (hanya valid dengan -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "-p FILE\tfile yang memegang enkripsi suatu PIN\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Pilihan argumen-argumen:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Keadaan menangani sertifikat:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "-I NAME\tnickname untuk menandai sebuah permintaan\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "-g SIZE\tsize  sebuah kunci untuk menghasilkan jika salah satu telah tidak "
 "berada di dalam tempat\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "-r\t\tattempt untuk memperbarui sertifikat ketika mendekati akhir waktu "
 "(kegagalan)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
-"-R\t\tdon't usaha untuk memperbarui sertifikat ketika mendekati akhir waktu\n"
+"-R\t\tdon't usaha untuk memperbarui sertifikat ketika mendekati akhir "
+"waktu\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr " -c CA\t\tuse CA khusus lebih baik daripada kegagalan\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Beberapa parameter untuk menandai permintaan:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N NAME\tset permintaan nama subjek (kegagalan: CN=<hostname>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "-U EXTUSAGE\tset memperluas permintaan pemakaian kunci OID\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "-K NAME\tset permintaan nama utama\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "-D DNSNAME\tset permintaan nama DNS\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "-E EMAIL\tset permintaan alamat email\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Pilihan Bus:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "-S\t\tconnect untuk layanan pemastian dalam sistem bus\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "-s\t\tconnect untuk layanan pemastian pada pembahasan bus\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Pemakaian: %s start-tracking [options]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Jika memodifikasi permintaan yang ada:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "-i NAME\tnickname permintaan mengikuti jalan yang ada\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Jika kunci adalah enkripsi:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "-I NAME\tnickname untuk memberi mengikuti permintaan\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Pemakaian:  %s stop-tracking [options]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Dengan memperkenalkan permintaan:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "-i NAME\tnickname untuk mengikuti permintaan\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Pemakaian: %s resubmit [options]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "-f FILE\tPEM berkas untuk sertifikat\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Parameter baru bernilai untuk menandai permintaan:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "-I NAME\tnew nama panggilan untuk memberikan mengikuti permintaan\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "-c CA\t\tuse CA khusus lebih baik daripada saat ini\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Pemakaian:  %s list [options]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Pilihan umum:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "-c CA\tlist hanya permintaan dan pemastian kolega dengan CA ini\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "-r\tlist hanya informasi tentang permintaan terkemuka\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "-t\tlist hanya informasi tentang jalannya sertifikat\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "-S\tconnect untuk layanan pemastian pada sistem bus\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "-s\tconnect untuk layanan pemastian pada pembahasan bus\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Pemakaian: %s list-cas [options]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "-c CA\tlist hanya informasi tentang CA dengan nama ini\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: tidak mengenali perintah\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Tidak dapat untuk menentukan nama utama untuk menandai permintaan.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr ""
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr ""
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr ""
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr ""
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr ""
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr ""
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr ""
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Eror pada bagian dalam telah terjadi"
 
@@ -1392,115 +1804,116 @@ msgstr "Tidak menemukan catatan masuk yang cocok.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Tipe penyimpanan sertifikat tidak khusus."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Tipe penyimpanan sertifikat \"%s\" tidak mendukung."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Lokasi \"%s\" harus analisa yang tepat."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Lokasi penyimpanan sertifikat tidak khusus."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "induk dari lokasi \"%s\" harus sebuah direktori yang valid."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Lokasi \"%s\" harus berupa berkas."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Lokasi \"%s\" harus berupa direktori."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "nama panggilan sertifikat tidak khusus."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Permintaan telah dilakukan dengan nama panggilan \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Tipe kunci penyimpanan \"%s\" tidak mendukung."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "lokasi kunci penyimpanan tidak khusus."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "kunci nama panggilan tidak khusus."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "CA tidak serupa."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Wewenang sertifikat \"%s\" tidak diketahui."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Tidak mengenal parameter atau salah tipe nilai."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/it.po b/po/it.po
index b35ffe1..42c61f4 100644
--- a/po/it.po
+++ b/po/it.po
@@ -1,134 +1,190 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Mario Santagiuliana <fedora at marionline.it>, 2012
 # Silvio Pierro <perplesso82@gmail.com>, 2012
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Italian (http://www.transifex.com/projects/p/certmonger/"
 "language/it/)\n"
 "Language: it\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Impossibile determinare l'hostname di CA.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Impossibile leggere la richiesta di firma.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Errore nell'impostazione di XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Errore di analisi della risposta del server.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Errore server.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Memoria esaurita.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 "Il percorso \"%s\" non è assoluto, tentativo di usare \"%s\" al suo posto.\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -137,163 +193,304 @@ msgstr ""
 "Il percorso \"%s\" non è assoluto, e si è verificato un errore nella "
 "determinazione del nome della cartella attuale.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Il percorso \"%s\" non è una cartella.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Percorso \"%s\": %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "Il percorso \"%s\" non è un file regolare.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Verificare che il servizio bus messaggi (D-bus) è in esecuzione.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Errore nella creazione di messaggi di richiesta DBus.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Errore \"%s\": %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Errore %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Errore: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Ricevuta una risposta di errore dal servizio locale %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Nessuna risposta ricevuta dal servizio %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Errore nell'inizializzazione della libreria Kerberos: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Impossibile valutare OID: \"%s\".\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Errore nell'analisi del nome principale Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Errore non analizzato nome principale Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: l'opzione richiede un argomento -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: opzione non valida -- '%c'\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Errore: argomento extra \"%s\" non usato.\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Errore: argomenti extra non usati dove forniti.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Posizione database o nickname specificato senza ordine.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Cartella database e file certificato specificati contemporaneamente.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -301,14 +498,14 @@ msgstr ""
 "Non è stata specificata nessuna cartella di database e nickname o file "
 "certificato.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "La chiave ed il certificato non possono essere salvati entrambi nello stesso "
 "file.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -317,1083 +514,1297 @@ msgstr ""
 "Il backend IPA richiede l'uso dell'opzione -K (nome principale) quando si "
 "usa l'opzione -N (nome soggetto).\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Non è stato trovato nessun CA con nome \"%s\".\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Errore nell'impostazione degli argomenti richiesti.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Aggiunta una nuova richiesta segnata \"%s\".\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "La nuova richiesta segnata non può essere aggiunta.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Aggiunta una nuova richiesta di tracking \"%s\".\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "La nuova richiesta di tracking non può essere aggiunta.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Non è stato specificato nessuno tra l'ID oppure la cartella di database ed "
 "il nickname oppure il certificato.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Richiesta \"%s\" modificata.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "La richiesta \"%s\" non può essere modificata.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Non è stata trovata nessuna richiesta con il nickname specificato.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Non è stata trovata nessuna richiesta con argomenti corrispondenti.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Richiesta \"%s\" rimossa.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "La richiesta \"%s\" non può essere rimossa.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Errore nella modifica di \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Re-invio di \"%s\" a \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Re-invio di \"%s\".\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Errore nel tentativo di sottomettere \"%s\" a \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Errore nel tentativo di sottomettere \"%s\".\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Il numero di certificati e di richieste sotto tracciamento: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID richiesto '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tstato: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\terrore-ca: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tstuck: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tcoppia chiavi di storage: tipo=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "NESSUNO"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",posizione='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",nickname='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfile='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertificato: tipo=%s,posizione='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\temittente: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsoggetto: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tscadenza: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "sconosciuto"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\temail:"
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tnome principale:"
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttraccia: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renew: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttipo-ca: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tposizione-aiutante: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tprossimo-numero-serie: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnomi-emittente-noti:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - strumento di registrazione certificato client\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Utilizzo: %s request [opzioni]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Argomenti richiesti:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Se si utilizza un database NSS per lo storage:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tDatabase NSS per chiave e certificato\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NOME\tnickname per gli storage basati su NSS (valido solo con -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NOME\tnome token opzionale per storage basato su NSS (valido solo con -"
 "d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Se si utilizzano file per lo storage:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE\tfile PEM per la chiave privata\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE\tfile PEM per il certificato (valido solo con -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Se le chiavi devono essere cifrate:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\til file che contiene il PIN di cifratura\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tvalore PIN\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Argomenti aggiuntivi:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Impostazioni di gestione certificato:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NOME\tnickname da assegnare alla richiesta\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g DIM\tdimensione della chiave da generare se non ne è già presente una\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\ttenta di rinnovare il certificato quando si avvicina la scadenza "
 "(predefinito)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -r\t\tnon tentare di rinnovare il certificato quando si avvicina la "
 "scadenza\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tusa il CA specificato piuttosto che il predefinito\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parametri per la richiesta segnata:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N NOME\timposta il nome del soggetto (predefinito: CN=<hostname>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U USOEXT\timposta l'utilizzo OID della chiave estesa richiesta\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NOME\timposta il nome principale richiesto\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D NOMEDNS\timposta il nome DNS richiesto\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\timposta l'indirizzo email richiesto\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Opzioni bus:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tconnessione al servizio certmonger sul bus di sistema\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -S\t\tconnessione al servizio certmonger sul bus di sessione\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Altre opzioni:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\triporta tutti i dettagli degli errori\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Utilizzo: %s start-tracking [opzioni]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Se si modifica una richiesta preesistente:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NOME\tnickname di una richiesta di tracking preesistente\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Se le chiavi sono cifrate:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NOME\tnickname da dare alla richiesta di tracking\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parametri per la richiesta segnante al momento del rinnovo:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
-msgstr ""
-"  -U USOEXT\tSovrascrive l'utilizzo OID della chiave estesa richiesta\n"
+msgstr "  -U USOEXT\tSovrascrive l'utilizzo OID della chiave estesa richiesta\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NOME\tsovrascrive il nome principale richiesto\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D NOMEDNS\tsovrascrive il nome DNS richiesto\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\tsovrascrive l'indirizzo email richiesto\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Utilizzo: %s stop-tracking [opzioni]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Per richieste di identificazione:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NOME\tnickname di una richiesta di tracking\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Utilizzo: %s resubmit [opzioni]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE\tfile PEM per il certificato\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nuovi valori di parametro per le richieste segnanti:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\tnuovo nickname da dare alla richiesta di tracking\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tusa il CA specificato piuttosto che l'attuale\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Utilizzo: %s list [opzioni]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Opzioni generali:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\telenca solo le richieste ed i certificati associati a questo CA\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\telenca solo le informazioni sulle richieste eccezionali\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\telenca solo le informazioni sui certificati tracciati\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Se si seleziona una richiesta specifica:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR\telenca solo le richieste ed i certificati che usano questo "
 "database NSS\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NOME\telenca solo le richieste ed i certificati che usano questo "
 "nickname\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FILE\telenca solo le richieste ed i certificati immagazzinati in questo "
 "file PEM\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tconnettersi al servizio certmonger sul bus di sistema\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tconnettersi al servizio certmonger sul bus di sessione\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Utilizzo: %s list-cas [opzioni]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\telenca solo informazioni sulla CA con questo nome\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: comando non riconosciuto\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "L'opzione -t non può essere usata con l'opzione -K .\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "L'opzione -k non può essere usata con l'opzione -K .\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
-"L'opzione -K non può essere usata ne con l'opzione -k che con l'opzione -"
-"t .\n"
+"L'opzione -K non può essere usata ne con l'opzione -k che con l'opzione -t ."
+"\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 "Impossibile determinare il nome principale per la richiesta di firma.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         usa bus di sessione\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-s         usa bus di sistema\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         non rende un demone\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-n         rende un demone\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b TIMEOUT attivato da bus, timeout inattivo\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         non usa un timeout inattivo\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d LEVEL   imposta il livello di debugging (implica -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p FILE    scrive il PID di servizio su file\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Si è verificato un errore interno."
 
@@ -1406,121 +1817,122 @@ msgstr "Non è stata trovata nessuna voce corrispondente.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "E' già presente una CA con il nickname \"%s\"."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Tipo di storage di certificato non specificato."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Tipo di storage di certificato \"%s\" non supportato."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "La posizione \"%s\" deve essere un percorso assoluto."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "La posizione di storage di certificato non è specificata."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 "La directory superiore della posizione \"%s\" deve essere una cartella "
 "valida."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "La posizione \"%s\" deve essere un file."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "La posizione \"%s\" deve essere una cartella."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Nickname del certificato non specificato."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "E' già presente una richiesta con il nickname \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Il certificato con questa posizione è già usato dalla richiesta con il "
 "nickname \"%s\"."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Tipo chiave di storage \"%s\" non supportata."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "La posizione di storage di chiave non è specificata."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Nickname di chiave non specificata."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "La chiave con questa posizione è già usata dalla richiesta con il nickname "
 "\"%s\"."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Nessuna CA."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Autorità di certificato \"%s\" sconosciuta."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Parametro non riconosciuto o tipo di valore errato."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/ja.po b/po/ja.po
index 80e2fcc..423be0b 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -1,7 +1,7 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # carrotsoft <www.carrotsoft@gmail.com>, 2011
 # Hajime Taira <htaira@redhat.com>, 2011-2012
@@ -12,1410 +12,1789 @@
 # carrotsoft <www.carrotsoft@gmail.com>, 2011
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Japanese (http://www.transifex.com/projects/p/certmonger/"
 "language/ja/)\n"
 "Language: ja\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "CA のホスト名を解釈できません。\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "署名リクエストを読むことができません。\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "XMLRPC の設定中にエラーが発生しました。\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "サーバーの応答を解析中にエラーが発生しました。\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "サーバーエラーです。\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "メモリーが不足\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
-msgstr ""
-"エージェント URL (-A) が指定されていません。また、デフォルトが不明です。\n"
+msgstr "エージェント URL (-A) が指定されていません。また、デフォルトが不明です。\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
-msgstr ""
-"エンド・エンティティ URL (-E) が指定されていません。また、デフォルトが不明で"
-"す。\n"
+msgstr "エンド・エンティティ URL (-E) が指定されていません。また、デフォルトが不明です。\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
-msgstr ""
-"エージェント URL (-A) が指定されていません。また、デフォルトが不明です。\n"
+msgstr "エージェント URL (-A) が指定されていません。また、デフォルトが不明です。\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
-msgstr ""
-"プロファイル/テンプレート (-T) が指定されていません。また、デフォルトが不明で"
-"す。\n"
+msgstr "プロファイル/テンプレート (-T) が指定されていません。また、デフォルトが不明です。\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "内部エラー: 未知の状態。\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "内部エラー: \"%s?%s\" への応答がありません。\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
-msgstr ""
-"パス \"%s\" が絶対パスではありません。代わりに \"%s\" で試行しています。\n"
+msgstr "パス \"%s\" が絶対パスではありません。代わりに \"%s\" で試行しています。\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
-msgstr ""
-"パス  \"%s\" が絶対パスではありません。また、カレントディレクトリーの名前を判"
-"断する際にエラーが発生しました。\n"
+msgstr "パス  \"%s\" が絶対パスではありません。また、カレントディレクトリーの名前を判断する際にエラーが発生しました。\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr "パス \"%s\": 権限がありません。\n"
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "パス \"%s\" はディレクトリーではありません。\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "パス \"%s\": %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "パス \"%s\" は一般ファイルではありません。\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "message bus (D-Bus) サービスが稼働中であることを確認してください。\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
-msgstr ""
-"D-Bus 要求メッセージを作成中にエラーが発生しました。\n"
+msgstr "D-Bus 要求メッセージを作成中にエラーが発生しました。\n"
 "\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "エラー %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "エラー %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "エラー: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "ローカルの %s サービスからエラー応答を受け取りました。\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "%s サービスから応答が受け取れません。\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Kerberos ライブラリーを初期化中にエラーが発生しました: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "\"%s\" キーの生成はサポートされません。\n"
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr "利用できるキー形式は以下のとおりです:"
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "認識できないキー使用法 \"%s\"。\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "OID \"%s\" を評価することができません。\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kerberos のプリンシパル名 \"%s\" をパース中にエラー: %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kerberos のプリンシパル名 \"%s\" をアンパース中にエラー: %s\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: オプションには引数が必要です。-- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: 無効なオプション -- '%c'\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "エラー: 使用されない余計な引数 \"%s\"。\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "エラー:余分なパラメーターが指定されました。\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
-msgstr ""
-"データベースの場所もしくはニックネームのどちらかが指定されていません。\n"
+msgstr "データベースの場所もしくはニックネームのどちらかが指定されていません。\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "データベースディレクトリーと証明書ファイルの両方が指定されています。\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
-msgstr ""
-"データベースディレクトリーとニックネーム、もしくは証明書ファイルの指定されて"
-"いません。\n"
+msgstr "データベースディレクトリーとニックネーム、もしくは証明書ファイルの指定されていません。\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "キーと証明書の両方を同じファイルに保存することができません。\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
-msgstr ""
-"IPA バックエンドは -N オプション(サブジェクト名) を使用した場合、-K オプショ"
-"ン(プリンシパル名)を必要とします。\n"
+msgstr "IPA バックエンドは -N オプション(サブジェクト名) を使用した場合、-K オプション(プリンシパル名)を必要とします。\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "\"%s\" という名前の CA が見つかりません。\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
-msgstr ""
-"リクエストの引数を設定中にエラーが発生しました。\n"
+msgstr "リクエストの引数を設定中にエラーが発生しました。\n"
 "\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "新しい署名リクエスト \"%s\" が追加されました。\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "新しい署名リクエストの追加ができません。\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "新しい追跡リクエスト \"%s\" が追加されました。\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "新しい追跡リクエストの追加ができません。\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
-msgstr ""
-"IDまたはデータベースディレクトリー、もしくはニックネーム、証明書ファイルの指"
-"定されていません。\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
+msgstr "IDまたはデータベースディレクトリー、もしくはニックネーム、証明書ファイルの指定されていません。\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "リクエスト \"%s\" は変更されました。\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "リクエスト \"%s\" は変更できません。\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "指定されたニックネームを持つリクエストが見つかりませんでした。\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "引数に該当したリクエストが見つかりません。\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "リクエスト \"%s\" は削除されました。\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "リクエスト \"%s\" は削除できません。\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
-msgstr ""
-"\"%s\" を変更中にエラーが発生しました。\n"
+msgstr "\"%s\" を変更中にエラーが発生しました。\n"
 "\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "\"%s\" を \"%s\" へ再送中です。\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "\"%s\" を再送中です。\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
-msgstr ""
-"\"%s\" を \"%s\" へ送信中にエラーが発生しました。\n"
+msgstr "\"%s\" を \"%s\" へ送信中にエラーが発生しました。\n"
 "\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
-msgstr ""
-"\"%s\" を送信中にエラーが発生しました。\n"
+msgstr "\"%s\" を送信中にエラーが発生しました。\n"
 "\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "追跡されている証明書とリクエストの数：%d\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "リクエスト ID '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\t状態: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tCAエラー: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tスタック: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tキーペアストレージ: type=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "なし"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",location='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",nickname='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfile='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\t証明書: type=%s,location='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\t発行者: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tサブジェクト: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\t有効期限: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "不明"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\tEメール: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tDNS: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tプリンシパル名: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tキー使用法: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\t拡張キー使用法: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\t保存前コマンド: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\t保存後コマンド: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\t追跡: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\t自動更新: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tCAの種類: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tヘルパーの場所: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\t次のシリアル番号: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\t発行者名:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - クライアント証明書登録ツール\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "使い方: %s request [オプション]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "必須の引数:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* もしストレージに NSS データベースを使う場合:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tキーと証明書のための NSS データベース\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
-msgstr ""
-"  -n NAME\tNSS ベースストレージのためのニックネーム(-d オプションを指定した時"
-"のみ有効)\n"
+msgstr "  -n NAME\tNSS ベースストレージのためのニックネーム(-d オプションを指定した時のみ有効)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
-msgstr ""
-"  -t 名前\tNSS ベースの記憶領域のためのオプションのトークン名(-d オプションを"
-"指定した時のみ有効)\n"
+msgstr "  -t 名前\tNSS ベースの記憶領域のためのオプションのトークン名(-d オプションを指定した時のみ有効)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* もしストレージのためにファイルを使う時:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE\tプライベートキーのための PEM ファイル\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE\t証明書のための PEM ファイル (-k を指定した場合のみ有効)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* もしキーが暗号化されていた場合:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\t暗号化されたPIN コードが含まれるファイル\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN コードの値\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "任意の引数:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* 証明書の処理方法の設定:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME\tリクエストに割り当てるニックネーム\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr "  -G TYPE\tキーが存在しない場合に生成されるキーの形式\n"
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr "  -g SIZE\tキーが存在しない場合に生成されるキーのビット長\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr "  -r\t\t有効期限が近づいている時に証明書を更新する(デフォルト)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr "  -R\t\t有効期限が近づいても証明書を更新しない\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\t指定されたCAではなく、デフォルトを使用\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
-msgstr ""
-"  -T PROFILE\t名前つきプロファイルまたはテンプレートを使用して、CA がリクエス"
-"トを処理するか確認します\n"
+msgstr "  -T PROFILE\t名前つきプロファイルまたはテンプレートを使用して、CA がリクエストを処理するか確認します\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* 署名中リクエストのパラメーター:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
-msgstr ""
-"  -N NAME\t要求されたサブジェクト名を設定 (デフォルト: CN=<ホスト名>)\n"
+msgstr "  -N NAME\t要求されたサブジェクト名を設定 (デフォルト: CN=<ホスト名>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\t 拡張キー使用法(EKU)のOIDを設定\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\t要求されたキー使用法の値を設定する\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME\t要求されたプリンシパル名を設定\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAME\t設定するDNS名\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\t要求したEメールアドレスを設定\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* バスのオプション:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tシステムバス上の certmonger サービスに接続\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tセッションバス上の certmonger サービスに接続\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* その他のオプション:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\t証明書を保存する前に実行するコマンド\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\t証明書を保存した後に実行するコマンド\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\t詳細なすべてのエラーを報告\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "使い方: %s start-tracking [オプション]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* もし既存のリクエストを変更する時:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME\t既存の追跡リクエストのニックネーム\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* もしキーが暗号化されていた時:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME\t追跡リクエストに与えるニックネーム\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* 更新時に署名リクエストのためのパラメーター:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\t指定されたキーのOIDで拡張キー使用法(EKU)を上書き\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME\t要求されたプリンシパル名を上書き\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\t要求された DNS 名を上書き\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\t要求されたEメールアドレスを上書き\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "使い方: %s stop-tracking [オプション]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* リクエストの識別子:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME\t追跡リクエストのためのニックネーム\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "使い方: %s resubmit [オプション]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE\t証明書のための PEM ファイル\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* 署名リクエストのための新しいパラメーター値:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\t追跡リクエストに新しいニックネームを付与\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\t指定されたCAではなく、現在のいずれかを使用\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "使い方: %s list [オプション]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* 一般的なオプション:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA\tこの CA に関連付けられているリクエストと証明書の一覧のみ\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr " -r\t未処理の要求についての情報の一覧のみ\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr " -t\t追跡済み証明書についての情報の一覧のみ\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* もしも特定のリクエストが選択された場合:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
-"  -d DIR<span class=\"whitespace other\" title=\"Tab\">»</span>この NSS デー"
-"タベースを使用するリクエストと証明書のみを表示\n"
+"  -d DIR<span class=\"whitespace other\" title=\"Tab\">»</span>この NSS "
+"データベースを使用するリクエストと証明書のみを表示\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
-"  -n NAME<span class=\"whitespace other\" title=\"Tab\">»</span>このニック"
-"ネームを使用するリクエストと証明書のみを表示\n"
+"  -n NAME<span class=\"whitespace other\" title=\"Tab\">»</"
+"span>このニックネームを使用するリクエストと証明書のみを表示\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
-"  -f FILE<span class=\"whitespace other\" title=\"Tab\">»</span>この PEM ファ"
-"イルに保存されているリクエストと証明書のみを表示\n"
+"  -f FILE<span class=\"whitespace other\" title=\"Tab\">»</span>この PEM "
+"ファイルに保存されているリクエストと証明書のみを表示\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tシステムバス上の certmonger サービスに接続\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tセッションバス上の certmonger サービスに接続\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "使い方: %s list-cas [オプション]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\t指定された名前の CA についての情報一覧のみ表示\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: 認識できないコマンド\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "クライアントで XMLRPC の設定中にエラーが発生しました。\n"
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "-t オプションは -K オプションと同時に使用できません。\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "-k オプションは -K オプションと同時に使用できません。\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "-K オプションは -k または -t オプションと同時に使用できません。\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "署名リクエストのためのプリンシパル名を解釈できません。\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
-msgstr ""
-"デフォルトのキーテーブルを使用するクライアントで \"host\" サービスの ccache "
-"セットアップ中にエラーが発生しました: %s。\n"
+msgstr "デフォルトのキーテーブルを使用するクライアントで \"host\" サービスの ccache セットアップ中にエラーが発生しました: %s。\n"
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
-msgstr ""
-"デフォルトのキーテーブルを使用するクライアントで \"%s\" の ccache セットアッ"
-"プ中にエラーが発生しました: %s。\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgstr "デフォルトのキーテーブルを使用するクライアントで \"%s\" の ccache セットアップ中にエラーが発生しました: %s。\n"
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
-"デフォルトのキーテーブル \"%s\" を使用するクライアントで \"host\" サービスの "
-"ccache セットアップ中にエラーが発生しました: %s。\n"
+"デフォルトのキーテーブル \"%s\" を使用するクライアントで \"host\" サービスの ccache セットアップ中にエラーが発生しました: "
+"%s。\n"
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
-" \"%s\" の ccache をデフォルトのキーテーブル \"%s\" を使用するクライアントで"
-"セットアップ中にエラーが発生しました: %s。\n"
+" \"%s\" の ccache をデフォルトのキーテーブル \"%s\" を使用するクライアントでセットアップ中にエラーが発生しました: %s。\n"
+
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
 
-#: src/main.c:137
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "使用法: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         セッションバスを使用\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         システムバスを使用\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         デーモンにならない\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         デーモンになる\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b TIMEOUT バス有効化、未使用でタイムアウト\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         アイドルタイムアウトを使用しない\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d LEVEL   デバッグレベルを設定 (-n を含む)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p FILE    サービスの PID をファイルに書き込む\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         強制的に NSS を FIPS モードにする\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "内部エラーが発生しました。"
 
@@ -1428,120 +1807,116 @@ msgstr "該当するエントリーが見つかりません。\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "ニックネーム \"%s\" は、すでに CA で使われています。"
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "証明書ストレージの種類が指定されていません。"
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "証明書ストレージの種類 \"%s\" はサポートされていません。"
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "場所 \"%s\" は絶対パスでなければなりません。"
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "証明書ストレージの場所が指定されていません。"
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr "権限が無いため \"%s\" の親ディレクトリにアクセスできませんでした。"
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
-msgstr ""
-"場所 \"%s\" の親ディレクトリーは有効なディレクトリーでなければなりません。"
+msgstr "場所 \"%s\" の親ディレクトリーは有効なディレクトリーでなければなりません。"
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "場所 \"%s\" はファイルでなければなりません。"
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr "権限が無いため \"%s\" にアクセスできませんでした。"
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "場所 \"%s\" はディレクトリーでなければなりません。"
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "証明書のニックネームが指定されていません。"
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "ニックネーム \"%s\" のリクエストは、すでにあります。"
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
-msgstr ""
-"同じ場所にある証明書は、すでにニックネーム \"%s\" を持つリクエストで使用され"
-"ています。"
+""
+msgstr "同じ場所にある証明書は、すでにニックネーム \"%s\" を持つリクエストで使用されています。"
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "キー・ストレージの種類 \"%s\" はサポートしていません。"
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "キー・ストレージの場所が指定されていません。"
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "キーのニックネームが指定されていません。"
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
-msgstr ""
-"同じ場所にあるキーは、すでにニックネーム \"%s\" を持つリクエストで使用されて"
-"います。"
+msgstr "同じ場所にあるキーは、すでにニックネーム \"%s\" を持つリクエストで使用されています。"
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "キー形式 \"%s\" はサポートされません。"
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "そのような証明局はありません。"
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "認証局 \"%s\" は認知されていない証明局です。"
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "認識されていないパラメーターか、もしくは不適切なデータ型です。"
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/lt.po b/po/lt.po
index 665aec9..9257a00 100644
--- a/po/lt.po
+++ b/po/lt.po
@@ -1,133 +1,189 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # FULL NAME <EMAIL@ADDRESS>, 2014
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Lithuanian (http://www.transifex.com/projects/p/certmonger/"
 "language/lt/)\n"
 "Language: lt\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && (n"
-"%100<10 || n%100>=20) ? 1 : 2);\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && "
+"(n%100<10 || n%100>=20) ? 1 : 2);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Nepavyko nustatyti LĮ serverio.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Nepavyko perskaityti pasirašymo užklausos.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Klaida nustatant XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Klaida skaitant serverio atsakymą.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Serverio klaida.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Baigėsi atmintis.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr "Nepateiktas agento URL (-A) ir nežinomas numatytasis.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr "Nepateikta pabaigos esybė (-E) ir nežinoma numatytoji.\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr "Nepateiktas agento URL (-A) ir nežinomas numatytasis.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Nepateiktas profilis/šablonas (-T) ir nežinomas numatytasis.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Vidinė klaida: nežinoma būsena.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "Klaida %d jungiantis prie %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Klaida %d jungiantis prie %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Vidinė klaida: nėra atsakymo į „%s?%s“.\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr "Kelias „%s“ nėra absoliutus, vietoj to bandoma naudoti „%s“.\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -136,163 +192,304 @@ msgstr ""
 "Kelias „%s“ nėra absoliutus ir kilo klaida nustatant dabartinio katalogo "
 "pavadinimą.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Kelias „%s“ nėra katalogas.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Kelias „%s“: %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "Kelias „%s“ nėra įprastinis failas.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Patikrinkite, ar pranešimų magistralės (D-Bus) tarnyba veikia.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Klaida kuriant DBus užklausos pranešimą.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Klaida %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Klaida %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Klaida: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Gautas klaidos pranešimas iš vietinės %s tarnybos.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Negautas atsakymas iš %s tarnybos.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Klaida inicializuojant Kerberos biblioteką: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Neatpažintas keyUsage „%s“.\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Nepavyko įvertinti OID „%s“.\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Klaida skaitant Kerberos direktoriaus pavadinimą „%s“: %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Klaida atstatant Kerberos direktoriaus pavadinimą „%s“: %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: parametras reikalauja argumento -- „%c“\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: netinkamas parametras -- „%c“\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Klaida: nenaudojamas papildomas argumentas „%s“.\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Klaida: pateikti nenaudojami papildomi argumentai.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Duomenų bazės vieta arba slapyvardis nurodyti be vienas kito.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Nurodyti abu: duomenų bazės katalogas ir liudijimo failas.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -300,12 +497,12 @@ msgstr ""
 "Nenurodytas nei duomenų bazės katalogas bei slapyvardis, nei liudijimo "
 "failas.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Raktas ir liudijimas negali būti abu įrašyti į tą patį failą.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -314,535 +511,669 @@ msgstr ""
 "IPA realizacija reikalauja naudoti parametrą -K (direktoriaus pavadinimas), "
 "kai naudojamas parametras -N (subjekto pavadinimas).\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Nerasta LĮ pavadinimu „%s“.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Klaida nustatant užklausos argumentus.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Nauja pasirašymo užklausa „%s“ pridėta.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Negalima pridėti naujos pasirašymo užklausos.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Pridėtas nauja sekimo užklausa „%s“.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Negalima pridėti naujos sekimo užklausos.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Nenurodytas nei duomenų bazės katalogas bei slapyvardis, nei liudijimo "
 "failas.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Užklausa „%s“ pakeista.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Užklausa „%s“ negali būti pakeista.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Nerasta užklausa su nurodytu slapyvardžiu.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Nerasta užklausa, kuri atitinka argumentus.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Užklausa „%s“ pašalinta.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Užklausos „%s“ nepavyko pašalinti.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Klaida keičiant „%s“.\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Iš naujo pateikiama „%s“ į „%s“.\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Iš naujo pateikiama „%s“.\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Klaida bandant pateikti „%s“ į „%s“.\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Klaida bandant pateikti „%s“.\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Sekamų liudijimų ir užklausų skaičius: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Užklausos ID „%s“:\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tbūsena: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tlį-klaida: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tužstrigo: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\traktų poros saugykla: tipas=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "NĖRA"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",vieta='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",slapyvardis='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",leksema='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfailas=„%s“"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tliudijimas: tipas=%s,vieta=„%s“"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tLĮ: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tišdavė: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsubjektas: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tgalioja iki: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "nežinoma"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\tel. paštas: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tdirektoriaus pavadinimas: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\trakto naudojimas: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tkomanda prieš įrašant: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tkomanda po įrašymo: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tsekimas: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tautomatinis atnaujinimas: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "LĮ „%s“:\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tlį tipas: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tpagalbininko vieta: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tkitas serijinis numeris: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tžinomų išdavėjų pavadinimai:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - kliento liudijimo įtraukimo įrankis\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Naudojimas: %s užklausa [parametrai]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Būtini argumentai:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Jei naudojama NSS duomenų bazė saugojimui:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tNSS duomenų bazė raktui ir liudijimui\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n PAVADINIMAS\tslapyvardis NSS pagrindo saugyklai (tinka tik su -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t PAVADINIMAS\tnebūtinas leksemos pavadinimas NSS pagrindo saugyklai "
 "(tinka tik su -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Jei saugyklai naudojami failai:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FAILAS\tprivataus rakto PEM failas\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FAILAS\tliudijimo PEM failas (tinka tik su -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Jei raktai turi būti šifruoti:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FAILAS\tfailas, kuris saugo šifravimo PIN\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN vertė\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Nebūtini argumentai:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Liudijimo apdorojimo nustatymai:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I PAVADINIMAS\tužklausai priskiriamas slapyvardis\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr "  -g DYDIS\tgeneruojamo rakto dydis, jei rakto dar nėra\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tbandymas atnaujinti liudijimą, kai baigiasi galiojimas (numatyta)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr "  -R\t\tnebandyti atnaujinti liudijimo, kai baigiasi galiojimas\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c LĮ\t\tnaudoti nurodytą LĮ vietoj numatytosios\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -850,541 +1181,622 @@ msgstr ""
 "  -T PROFILIS\tprašyti LĮ apdoroti užklausą naudojant pavadintą profilį ar "
 "šabloną\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parametrai pasirašymo užklausai:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N PAVADINIMAS\tnustatyti subjekto pavadinimą (numatyta: CN=<serveris>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "-U IŠPLNAUD\tnustatyti prašomą išplėstinį rakto naudojimo OID\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u RAKTONAUD\tnustatyti prašomą rakto naudojimo vertę\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K PAVADINIMAS\tnustatyti prašomą direktoriaus pavadinimą\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "-D DNSPAV\tnustatyti prašomą DNS pavadinimą\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E ELPAŠTAS\tnustatyti prašomą el. pašto adresą\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Magistralės parametrai:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tprisijungti prie certmonger tarnybos sistemos magistralėje\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tprisijungti prie certmonger tarnybos seanso magistralėje\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Kiti parametrai:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tkomanda, vykdoma prieš įrašant liudijimą\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tkomanda, vykdoma po liudijimo įrašymo\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tpranešti visą informaciją apie klaidas\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Naudojimas: %s start-tracking [parametrai]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Jei keičiama esama užklausa:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i PAVADINIMAS\tesamos sekamos užklausos slapyvardis\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Jei raktai yra šifruoti:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I PAVADINIMAS\tslapyvardis sekamai užklausai\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parametrai pasirašymo užklausai atnaujinimo metu:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U IŠPLNAUD\tperrašyti išplėstinio rakto naudojimo OID\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K PAVADINIMAS\tperrašyti prašomą direktoriaus pavadinimą\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSPAV\tperrašyti prašomą DNS pavadinimą\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E ELPAŠAS\tperrašyti prašomą el. pašto adresą\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Naudojimas: %s stop-tracking [parametrai]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Pagal užklausos identifikatorių:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i PAV\tslapyvardis sekamai užklausai\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Naudojimas: %s resubmit [parametrai]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FAILAS\tliudijimo PEM failas\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Naujos parametrų vertės pasirašymo užklausai:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I PAV\tnaujas slapyvardis sekimo užklausai\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c LĮ\t\tnaudoti nurodytą LĮ vietoj dabartinės\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Naudojimas: %s list [parametrai]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Bendri parametrai:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
-msgstr ""
-"  -c LĮ\tišvardinti tik užklausas ir liudijimus, susijusius su šia LĮ\n"
+msgstr "  -c LĮ\tišvardinti tik užklausas ir liudijimus, susijusius su šia LĮ\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tpateikti tik informaciją apie neįvykdytas užklausas\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tpateikti tik informaciją apie sekamus liudijimus\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Jei pasirenkama specifinė užklausa:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR\tišvardinti tik užklausas ir liudijimus, kurie naudoja šią NSS "
 "duomenų bazę\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n PAV\tišvardinti tik užklausas ir liudijimus, kurie naudoja šį "
 "slapyvardį\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
-"  -f FAILAS\tišvardinti tik užklausas ir liudijimu, įrašytus į šį PEM failą\n"
+"  -f FAILAS\tišvardinti tik užklausas ir liudijimu, įrašytus į šį PEM "
+"failą\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tprisijungti prie certmonger tarnybos sistemos magistralėje\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tprisijungti prie certmonger tarnybos seanso magistralėje\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Naudojimas: %s list-cas [parametrai]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c LĮ\tpateikti tik informaciją apie LĮ su šiuo pavadinimu\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: neatpažinta komanda\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "-t patametro negalima naudoti su -K parametru.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "-k parametro negalima naudoti su parametru -K.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "-K parametro negalima naudoti su -k arba -t parametru.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Nepavyko nustatyti pasirašymo užklausos direktoriaus pavadinimo.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Naudojimas: %s [-s|-S] [-n|-f] [-d LYGIS] [-p FAILAS] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         naudoti seanso magistralę\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         naudoti sistemos magistralę\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         netapti demonu\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         netapti demonu\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b LAIKAS aktyvuojant per magistralę, neveiksnumo laikas\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         nenaudoti neveiksnumo laiko\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d LYGIS   nustatyti derinimo lygį (įtraukia -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p FAILAS   įrašyti tarnybos PID failą\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         priverstinė NSS į FIPS veikseną\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Kilo vidinė klaida."
 
@@ -1397,117 +1809,118 @@ msgstr "Nerastas atitinkamas įrašas.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Jau yra LĮ slapyvardžiu „%s“."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Nenurodytas liudijimo saugyklos tipas."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Liudijimo saugyklos tipas „%s“ nepalaikomas."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Vieta „%s“ turi būti absoliučiu kelius."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Nenurodyta liudijimo saugojimo vieta."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Vietos „%s“ tėvas turi būti katalogas."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Vieta „%s“ turi būti failas."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Vieta „%s“ turi būti katalogas."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Nenurodytas liudijimo slapyvardis."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Jau yra užklausa slapyvardžiu „%s“."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Liudijimas toje pačioje vietoje jau naudojamas užklausos slapyvardžiu „%s“."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Rakto saugyklos tipas „%s“ nepalaikomas."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "Nenurodyta rakto saugyklos vieta."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Nenurodyta rakto slapyvardis."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Raktas toje pačioje vietoje jau naudojamas užklausos slapyvardžiu „%s“."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Nėra tokios LĮ."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Liudijimų įstaiga „%s“ nežinoma."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Neatpažintas parametras arba blogas vertės tipas."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/nb.po b/po/nb.po
index 9aee2ef..200bd4f 100644
--- a/po/nb.po
+++ b/po/nb.po
@@ -1,1368 +1,1780 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Kjartan Maraas <kmaraas@gnome.org>, 2011
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Norwegian Bokmål (http://www.transifex.com/projects/p/"
 "certmonger/language/nb/)\n"
 "Language: nb\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Kan ikke bestemme vertsnavn for CA.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Kan ikke lese forespørsel om signering.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Feil ved oppsett av XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Feil ved tolking av svar fra tjener.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Feil med tjener.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr ""
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
 msgstr ""
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr ""
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr ""
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr ""
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Feil %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Feil %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr ""
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr ""
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr ""
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr ""
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr ""
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr ""
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr ""
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr ""
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr ""
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -1375,115 +1787,116 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/nl.po b/po/nl.po
index e1456b3..1ba6c31 100644
--- a/po/nl.po
+++ b/po/nl.po
@@ -1,134 +1,190 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Geert Warrink <geert.warrink@onsnet.nu>, 2011-2014
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-12 06:06-0500\n"
 "Last-Translator: Geert Warrink <geert.warrink@onsnet.nu>\n"
 "Language-Team: Dutch (http://www.transifex.com/projects/p/certmonger/"
 "language/nl/)\n"
 "Language: nl\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Kan de hostnaam van CA niet bepalen.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Kan ondetekeningverzoek niet lezen.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Fout bij het opzetten van XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Fout bij het ontleden van antwoord van de server.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Serverfout.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Geen geheugen beschikbaar.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr "Geen agent URL (-A) gegeven en er is geen standaard bekend.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr "Vernieuwing werd aangevraagd, maar er is geen serienummer aangeboden\n"
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr "Geen eind-entity URL (-E) opgegeven en er is geen standaard bekend.\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr "Geen agent URL (-A) gegeven en er is geen standaard bekend.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Geen profiel/template (-T) gegeven en er is geen standaard bekend.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr "Fout bij het afsluiten van NSS.\n"
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Interne fout: onbekende toestand.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr "Er is geen agent legitimatie (-n) opgeven, maar dit is wel nodig.\n"
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "Fout %d bij het verbinden met %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Fout %d bij het verbinden met %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Interne fout: geen antwoord op \"%s?%s\".\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 "Pad \"%s\" is niet absoluut, in plaats daarvan wordt geprobeerd om \"%s\" te "
 "gebruiken.\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -137,178 +193,318 @@ msgstr ""
 "Pad \"%s\" is niet absoluut en er was een fout bij het bepalen van de naam "
 "van de huidige map.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr "Pad \"%s\": onvoldoende rechten.\n"
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Pad \"%s\" is geen map.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Pad \"%s\": %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "Pad \"%s\" is geen gewoon bestand.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr "Er draait geen systeembus.\n"
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr "Uitvoeren met UID 0.\n"
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr "Er wordt een tijdelijk specifieke service daemon opgestart.\n"
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr "Fout bij het verbinden met D-Bus.\n"
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Verifieer of de berichtenbus (D-Bus) service draait.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Fout bij het aanmaken van DBus verzoekbericht.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Fout %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Fout %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Fout: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Fout ontvangen van de lokale %s service.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Geen reactie ontvangen van %s service.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr "Toestand %s, vast: %s.\n"
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Fout bij het initialiseren van Kerberos bibliotheek: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Er is geen ondersteuning voor het aanmaken van \"%s\" sleutels.\n"
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr "Bekende sleuteltypen zijn:"
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Niet herkende keyUsage \"%s\".\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Kon OID \"%s\" niet evalueren.\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fout bij het ontleden van Kerberos principal naam \"%s\": %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fout bij unparsing van Kerberos principal naam \"%s\": %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr "%s: ongeldige waarde -- '%s'\n"
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: optie vereist een argument -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: ongeldige optie -- '%c'\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Fout: niet gebruikt extra argument \"%s\".\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
-msgstr ""
-"Fout: er zijn niet gebruikte extra argumenten opgegeven.\n"
+msgstr "Fout: er zijn niet gebruikte extra argumenten opgegeven.\n"
 " \n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Database locatie of bijnaam opgegeven zonder de andere.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Database map en certificaatbestand beide gespecificeerd.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr "Zowel database map als bijnaam of certificaat niet opgegeven.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "Sleutel en certificaat kunnen niet beide in hetzelfde bestand opgeslagen "
 "worden.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -317,290 +513,372 @@ msgstr ""
 "De IPA backend vereist het gebruik van de -K optie (principal naam) als de -"
 "N optie (onderwerpnaam) gebruikt wordt.\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Geen CA met de naam \"%s\" gevonden.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Fout bij instellen verzoek argumenten.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Nieuw ondertekeningverzoek \"%s\" toegevoegd.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Nieuw ondertekeningverzoek  kon niet toegevoegd worden.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Nieuwe track verzoek \"%s\" toegevoegd.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Nieuw track verzoek kon niet toegevoegd worden.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr "Zowel ID als database map en bijnaam of certificaat niet opgegeven.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Verzoek \"%s\" gewijzigd.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Verzoek \"%s\" kan niet gewijzigd worden.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Geen aanvraag gevonden met de gespecificeerde bijnaam.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Geen verzoek gevonden dat overeenkomt met argumenten.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Verzoek \"%s\" verwijderd.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Verzoek \"%s\" kon niet verwijderd worden.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Fout bij het wijzigen van \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "\"%s\" opnieuw indienen bij \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "\"%s\" opnieuw indienen.\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Fout bij het indienen van \"%s\" bij \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Fout bij het indienen van \"%s\".\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr "Verzoek ID '%s' wordt ververst.\n"
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr "Verzoek ID '%s' wordt NIET ververst.\n"
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Aantal certificaten en verzoeken dat bijgehouden wordt:%d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Verzoek ID '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "»status: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "»ca-fout: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "»vast: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "»sleutelpaar opslag: type=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "GEEN"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",locatie='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",bijnaam='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinbestand='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "»certificaat: type=%s,locatie='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "»CA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "»uitgever: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "»onderwerp: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "»verloopt: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "onbekend"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "»email: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "»dns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "»principal naam: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr "\tIP adres: "
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tkey usage: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "»eku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr "\troot certificaten opgeslagen in bestanden:\n"
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr "\tandere root certificaten opgeslagen in bestanden:\n"
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr "\tandere certificaten opgeslagen in bestanden:\n"
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr "\troot certificaten opgeslagen in databases:\n"
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr "\tandere root certificaten opgeslagen in databases:\n"
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr "\tandere certificaten opgeslagen in databases:\n"
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tpre-save command: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tpost-save command: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "»track: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "»auto-renew: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
@@ -609,248 +887,301 @@ msgstr ""
 "Zowel ID als database map en bijnaam of certificaat zijn niet opgegeven.\n"
 "\n"
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr "\tzelf-identificatie: %s\n"
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "»ca-type: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "»helper-locatie %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "»next-serial-nummer: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "»bekende-uitgever-namen:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr "\tbekende profielen/templates/certtypes:\n"
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr "\tstandaard profiel/template/certtype: %s\n"
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr "Noch CA bijnaam noch -a vlag gespecificeerd.\n"
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr "Data voor CA '%s' wordt ververst.\n"
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr "Data voor naamloze CA wordt ververst.\n"
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr "\tfout bij verversen van CA data\n"
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - cliënt certificaat uitgeef gereedschap\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Gebruik: %s request [opties]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Vereiste argumenten:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Als een NSS database voor opslag gebruikt wordt:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d MAP»NSS database voor sleutel en cert\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAAM»bijnaam voor op NSS gebaseerde opslag (alleen geldig met -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAAM»optionele token naam voor op NSS gebaseerde opslag (alleen geldig "
 "met -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Als bestanden voor opslag gebruikt worden:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k BESTAND»PEM bestand voor prive sleutel\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f BESTAND»PEM bestand voor certificaat (alleen geldig met -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Als sleutels gecodeerd moeten worden:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p BESTAND»bestand welke de codering PIN bevat\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN»PIN waarde\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Optionele argumenten:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Certificaat afhandel instellingen:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAAM»bijnaam toegekend aan het verzoek\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 "  -G TYPE\tsleuteltype dat aangemaakt wordt als er nog geen aanwezig is\n"
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g GROOTTE»grootte van de te genereren sleutel als er nog geen aanwezig "
 "is\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r»»probeer het certificaat te vernieuwen als de verloopdatum nadert "
 "(standaard)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
-"  -R»»probeer het certificaat niet te vernieuwen als de verloopdatum nadert\n"
+"  -R»»probeer het certificaat niet te vernieuwen als de verloopdatum "
+"nadert\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA»»gebruik de gespecificeerde CA in plaats van de standaard\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -858,464 +1189,482 @@ msgstr ""
 "  -T PROFILE\tvraag de CA om het verzoek de verwerken met het opgegeven "
 "profiel of template\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parameters voor het ondertekening verzoek:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAAM»stel de gevraagde subject naam in (standaard: CN=<hostnaam>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE»stel het gevraagde uitgebreide sleutel gebruik OID in\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\tstel aangevraagde sleutel gebruik waarde in\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAAM»stel de gevraagde principal naam in\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAAM»stel de gevraagde DNS naam in\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL»stel het gevraagde email adres in\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A ADRES\tstel vereiste IP adres in\n"
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Bus opties:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S»»verbind met de certmonger service op de systeem bus\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s»»verbind met de certmonger service op de sessie bus\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Andere opties:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tcommando uit te voeren voor het opslaan van het certificaat\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tcommando uit te voeren na het opslaan van het certificaat\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr "  -F\tbestand waarin de certificaten van de CA opgeslagen worden\n"
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
-msgstr ""
-"  -a\tNSS database waarin de certificaten van de CA opgeslagen worden\n"
+msgstr "  -a\tNSS database waarin de certificaten van de CA opgeslagen worden\n"
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr "  -w\tprobeer te wachten totdat het certificaat afgegeven is\n"
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v»rapporteer alle foutdetails\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Gebruik: %s start-tracking [opties]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Als een bestaande aanvraag veranderd wordt:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAAM»bijnaam van een bestaand track verzoek\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Als sleutels gecodeerd zijn:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAAM»bijnaam te geven aan track verzoek\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parameters voor het ondertekeningverzoek bij het vernieuwen:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE»overschrijf gevraagde uitgebreide sleutel gebruik OID\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAAM»overschrijf gevraagde principal naame\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAAM»overschrijf gevraagde DNS naam\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL»overschrijf gevraagde email adres\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A ADRES\toverschrijf gevraagde IP adres\n"
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Gebruik: %s stop-tracking [opties]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Op verzoek id:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAAM»bijnaam voor track verzoek\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Gebruik: %s resubmit [opties]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f BESTAND»PEM bestand voor certificaat\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nieuwe parameterwaarden voor de ondertekening verzoek:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAAM»nieuwe bijnaam om aan track verzoek te geven\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA»»gebruik de gespecificeerde CA in plaats van de huidige\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Gebruik: %s list [opties]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Algemene opties:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA»laat allen verzoeken certificaten zien die bij deze CA horen\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r»laat alleen informatie zien over uitstaande verzoeken\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t»laat alleen informatie zien over gevolgde certificaten\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Als een specifiek verzoek geselecteerd wordt:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d MAP»toon alleen verzoeken en certificaten die deze NSS database "
 "gebruiken\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
-"  -n NAAM» toon alleen verzoeken en certificaten die deze bijnaam gebruiken\n"
+"  -n NAAM» toon alleen verzoeken en certificaten die deze bijnaam "
+"gebruiken\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f BESTAND»toon alleen verzoeken en certificaten die in dit PEM bestand "
 "opgeslagen zijn\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S»verbind met de certmonger service op de systeem bus\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s»verbind met de certmonger service op de sessie bus\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr "Gebruik: %s refresh [opties]\n"
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr "Gebruik: %s status [opties]\n"
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr "* Selecteer een specifieke aanvraag:\n"
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr "* Als een NSS database gebruikt wordt voor opslag:\n"
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr "  -d MAP\tgeef status voor het verzoek terug in deze NSS database\n"
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr "  -n NAAM\tgeef status voor cert die deze bijnaam gebruikt\n"
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr "* Als bestanden gebruikt worden voor opslag:\n"
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 "  -f BESTAND\tgeef status terug voor cert opgeslagen in dit PEM bestand\n"
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Gebruik: %s list-cas [opties]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA»laat alleen informatie zien over de CA met deze naam\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr "Gebruik: %s refresh-ca [opties]\n"
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr "  -c CA\tververs informatie over de CA met deze naam\n"
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr "Gebruik: %s commando [opties]\n"
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr "vraag een nieuw certificaat aan van een CA\n"
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr "begin met het monitoren van een reeds uitgegeven certificaat\n"
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr "stop met het monitoren van een certificaat\n"
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 "dien een inschrijvingsverzoek in uitvoering opnieuw in, of begin met een "
 "nieuw\n"
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr "controleer de status van een inschrijvingsverzoek in uitvoering\n"
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr "toon gemonitorde en aangevraagde certificaten\n"
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 "controleer de status van een certificaat dat gemonitord wordt of aangevraagd "
 "is\n"
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr "ververs de cache met alle informatie verkregen van een CA\n"
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: onbekend commando\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr "Kan locatie van IPA LDAP server niet vaststellen.\n"
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr "Kan geen contact krijgen met een IPA LDAP server.\n"
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr "Kan basis DN niet vaststellen uit domeininformatie van IPA server.\n"
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "Fout bij het instellen van XMLRPC op de cliënt.\n"
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "De -t optie kan niet met de -K optie gebruikt worden.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "De -k optie kan niet met de -K optie gebruikt worden.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "De -K optie niet met de -k of the -t optie gebruikt worden.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Kan principal naam voor de aanvraag ondertekening niet bepalen.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -1324,15 +1673,14 @@ msgstr ""
 "Fout bij het instellen van ccache voor \"host\" service op cliënt die "
 "standaard keytab: %s gebruikt.\n"
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 "Fout bij het instellen van ccache voor  \"%s\" op cliënt die standaard "
 "keytab: %s gebruikt.\n"
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -1341,73 +1689,136 @@ msgstr ""
 "Fout bij het instellen van ccache voor \"host\" service die keytab \"%s\" "
 "gebruikt: %s.\n"
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 "Fout bij het instellen van ccache voor \"%s\" op cliënt die keytab \"%s\" "
 "gebruikt: %s.\n"
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Gebruik: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         gebruik sessie bus\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         gebruik systeem bus\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr "\t-l         start een specifieke socket om naar te luisteren\n"
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
-msgstr ""
-"\t-L         gebruik alleen een specifiek socket om naar te luisteren\n"
+msgstr "\t-L         gebruik alleen een specifiek socket om naar te luisteren\n"
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 "\t-P PAD    specificeert de specifieke socket waarnaar geluisterd wordt\n"
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         niet omzetten in een daemon\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         omzetten in een daemon\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b TIMEOUT bus-geactiveerde, idle timeout\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         gebruik geen idle timeout\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d LEVEL   stel debug niveau in (impliceert -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr "\t-c COMMANDO start COMMANDO sluit af als deze dat doet\n"
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p BESTAND schrijf een service PID naar bestand\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         forceer NSS naar de FIPS modus\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Er is een interne fout opgetreden."
 
@@ -1420,29 +1831,29 @@ msgstr "Geen bijpassende ingang gevonden.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Er is al een CA met de bijnaam \"%s\"."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Certificaat opslag type niet gespecificeerd."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Certificaat opslag type \"%s\" niet ondersteund."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "De locatie \"%s\" moet een absoluut pad zijn."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Certificaat opslaglocatie niet gespecificeerd."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -1451,90 +1862,91 @@ msgstr ""
 "Er is geen toegang tot de ouder van locatie \"%s\" wegens onvoldoende "
 "rechten."
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "De ouder van locatie \"%s\" moet een geldige map zijn."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "De locatie \"%s\" moet een bestand zijn."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr "Er is geen toegang tot de locatie \"%s\" wegens onvoldoende rechten."
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "De locatie \"%s\" moet een map zijn."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Certificaat bijnaam niet opgegeven."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Er is al een verzoek met de bijnaam \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Een certificaat op dezelfde locatie wordt al gebruik door een aanvraag met "
 "bijnaam \"%s\"."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Sleutel opslag type \"%s\" niet ondersteund."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "sleutel opslaglocatie niet gespecificeerd."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Sleutel bijnaam niet opgegeven."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Een sleutel op dezelfde locatie wordt al gebruik door een aanvraag met "
 "bijnaam \"%s\"."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Er is geen ondersteuning voor sleuteltype \"%s\"."
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Onbekende CA."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Certificaat autoriteit \"%s\" is niet bekend."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Onbekende parameter of verkeerde type waarde."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr "Fout bij het ontleden van argumenten."
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr "Onbekende eigenschap naam."
 
diff --git a/po/pl.po b/po/pl.po
index 75c33ba..d120bf7 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -1,138 +1,196 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Nalin Dahyabhai <nalin@fedoraproject.org>, 2011
 # Piotr Drąg <piotrdrag@gmail.com>, 2011-2014
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-14 08:29-0500\n"
 "Last-Translator: Piotr Drąg <piotrdrag@gmail.com>\n"
 "Language-Team: Polish (http://www.transifex.com/projects/p/certmonger/"
 "language/pl/)\n"
 "Language: pl\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=(n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 "
 "|| n%100>=20) ? 1 : 2);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Nie można określić nazwy komputera CA.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Nie można odczytać żądania podpisania.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Błąd podczas ustawiania dla XML-RPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Błąd podczas przetwarzania odpowiedzi serwera.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Błąd serwera.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Brak pamięci.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr "Nie podano adresu URL agenta (-A), a nie ma wartości domyślnej.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr "Zażądano odnowienia, ale nie podano numeru seryjnego.\n"
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
-"Nie podano adresu URL końcowej jednostki (-E), a nie ma wartości domyślnej.\n"
+"Nie podano adresu URL końcowej jednostki (-E), a nie ma wartości domyślnej."
+"\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr "Nie podano adresu URL agenta (-A), a nie ma wartości domyślnej.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Nie podano profilu/szablonu (-T), a nie ma wartości domyślnej.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr "Błąd podczas wyłączania NSS.\n"
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Wewnętrzny błąd: nieznany stan.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
-"Nie podano żadnych danych uwierzytelniających agenta (-n), które są "
-"wymagane.\n"
+"Nie podano żadnych danych uwierzytelniających agenta (-n), które są wymagane."
+"\n"
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "Błąd %d podczas łączenia z %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Błąd %d podczas łączenia z %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Wewnętrzny błąd: brak odpowiedzi na \"%s?%s\".\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
-"Ścieżka \"%s\" nie jest bezwzględna, próbowanie użycia \"%s\" zamiast niej.\n"
+"Ścieżka \"%s\" nie jest bezwzględna, próbowanie użycia \"%s\" zamiast niej."
+"\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -141,178 +199,319 @@ msgstr ""
 "Ścieżka \"%s\" nie jest bezwzględna i wystąpił błąd podczas określania nazwy "
 "bieżącego katalogu.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr "Ścieżka \"%s\": niewystarczające uprawnienia.\n"
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Ścieżka \"%s\" nie jest katalogiem.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Ścieżka \"%s\": %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "Ścieżka \"%s\" nie jest zwykłym plikiem.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr "Magistrala systemowa nie jest uruchomiona.\n"
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr "Uruchamianie jako UID 0.\n"
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr "Uruchamianie tymczasowego dedykowanego demona usługi.\n"
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr "Błąd podczas łączenia z usługą D-Bus.\n"
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
-"Proszę sprawdzić, czy usługa magistrali komunikatów (D-Bus) jest "
-"uruchomiona.\n"
+"Proszę sprawdzić, czy usługa magistrali komunikatów (D-Bus) jest uruchomiona."
+"\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Błąd podczas tworzenia komunikatu żądania D-Bus.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Błąd %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Błąd %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Błąd: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Otrzymano błędną odpowiedź z lokalnej usługi %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Nie otrzymano odpowiedzi z usługi %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr "Stan %s, zatkanie: %s.\n"
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Błąd podczas inicjowania biblioteki Kerberos: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Brak obsługi tworzenia kluczy \"%s\".\n"
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr "Znane typy kluczy:"
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Nierozpoznane użycie klucza \"%s\".\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Nie można obliczyć OID \"%s\".\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Błąd podczas przetwarzania nazwy naczelnika Kerberosa \"%s\": %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
-"Błąd podczas odwracania przetworzenia nazwy naczelnika Kerberosa \"%s\": "
-"%s.\n"
+"Błąd podczas odwracania przetworzenia nazwy naczelnika Kerberosa \"%s\": %s."
+"\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr "%s: nieprawidłowa wartość - \"%s\"\n"
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: opcja wymaga parametru - \"%c\"\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: nieprawidłowa opcja - \"%c\"\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Błąd: nieużywany dodatkowy parametr \"%s\".\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Błąd: podano nieużywane dodatkowe parametry.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Podano położenie bazy danych lub pseudonim bez drugiego parametru.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Określono zarówno katalog bazy danych, jak i plik certyfikatu.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr "Nie podano katalogu bazy danych i pseudonimu lub pliku certyfikatu.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Nie można zapisać klucza i certyfikatu do tego samego pliku.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -321,292 +520,374 @@ msgstr ""
 "Zaplecze IPA wymaga użycia opcji -K (nazwy naczelnika), kiedy używana jest "
 "opcja -N (nazwa tematu).\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Nie odnaleziono CA o nazwie \"%s\".\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Błąd podczas ustawiania parametrów żądania.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Dodano nowe żądanie podpisania \"%s\".\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Nie można dodać nowego żądania podpisania.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Dodano nowe żądanie śledzenia \"%s\".\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Nie można dodać nowego żądania śledzenia.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Nie podano identyfikatora, albo katalogu bazy danych i pseudonimu, albo "
 "pliku certyfikatu.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Zmodyfikowano żądanie \"%s\".\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Nie można zmodyfikować żądania \"%s\".\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Nie odnaleziono żądania dla podanego pseudonimu.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Nie odnaleziono żądania pasującego do parametrów.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Usunięto żądanie \"%s\".\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Nie można usunąć żądania \"%s\".\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Błąd podczas modyfikowania \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Ponowne wysyłanie \"%s\" do \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Ponowne wysyłanie \"%s\".\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Błąd podczas próby wysłania \"%s\" do \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Błąd podczas próby wysłania \"%s\".\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr "Identyfikator żądania \"%s\" jest odświeżany.\n"
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr "Identyfikator żądania \"%s\" NIE jest odświeżany.\n"
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Liczba śledzonych certyfikatów i żądań: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Identyfikator żądania \"%s\":\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tstan: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tbłąd-ca: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tzatkanie: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tpamięć masowa pary kluczy: typ=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "BRAK"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",położenie=\"%s\""
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",pseudonim=\"%s\""
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",token=\"%s\""
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin=\"%s\""
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",plik-pinu=\"%s\""
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertyfikat: typ=%s,położenie=\"%s\""
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\twystawca: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\ttemat: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\twygasa: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "nieznane"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\te-mail: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tnazwa naczelnika: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr "\tAdres IP: "
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tużycie klucza: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr "\tcertyfikaty roota zapisane do plików:\n"
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr "\tinne certyfikaty roota zapisane do plików:\n"
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr "\tinne certyfikaty zapisane do plików:\n"
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr "\tcertyfikaty roota zapisane w bazach danych:\n"
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr "\tinne certyfikaty roota zapisane w bazach danych:\n"
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr "\tinne certyfikaty zapisane w bazach danych:\n"
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tpolecenie pre-save: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tpolecenie post-save: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tścieżka: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tautomatyczne-odnawianie: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
@@ -616,247 +897,299 @@ msgstr ""
 "pliku certyfikatu.\n"
 "\n"
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA \"%s\":\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr "\tidentyfikuje się jako: %s\n"
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttyp-ca: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tpołożenie-pomocnika: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tnastępny-numer-seryjny: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnazwy-znanych-wystawców: \n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr "\tznane profile/szablony/typy certyfikatów:\n"
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr "\tdomyślny profil/szablon/typ certyfikatu: %s\n"
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr "Nie podano pseudonimu CA ani flagi -a.\n"
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr "Dane dla CA \"%s\" są odświeżane.\n"
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr "Dane dla nienazwanego CA są odświeżane.\n"
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr "\tbłąd podczas odświeżania danych CA\n"
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - narzędzie kwalifikowania certyfikatów klientów\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Użycie: %s request [opcje]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Wymagane parametry:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Podczas używania bazy NSS do przechowywania danych:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d KAT\tbaza danych NSS dla klucza i certyfikatu\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAZWA\tpseudonim dla przechowywania danych opartego na NSS (prawidłowe "
 "tylko z opcją -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAZWA\topcjonalna nazwa tokenu dla przechowywania opartego na NSS "
 "(prawidłowe tylko z opcją -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Podczas używania plików do przechowywania:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k PLIK\tplik PEM dla klucza prywatnego\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f PLIK\tplik PEM dla certyfikatu (prawidłowe tylko z opcją -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Jeśli klucze mają zostać zaszyfrowane:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p PLIK\tplik przechowujący kod PIN szyfrowania\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\twartość kodu PIN\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Opcjonalne parametry:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Ustawienia obsługiwania certyfikatów:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAZWA\tpseudonim do przydzielenia żądaniu\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr "  -G TYP\ttyp klucza do utworzenia, jeśli jeszcze nie ma żadnego\n"
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g ROZMIAR\trozmiar klucza do utworzenia, jeśli jeszcze nie ma żadnego\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tpróbuje odnowić certyfikat, kiedy zbliża się jego wygaszenie "
 "(domyślnie)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tnie próbuje odnowić certyfikatu, kiedy zbliża się jego wygaszenie\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tużywa podanego CA zamiast domyślnego\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -864,462 +1197,479 @@ msgstr ""
 "  -T PROFIL\t\tprosi CAo przetworzenie żądania używając nazwanego profilu "
 "lub szablonu\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parametry do żądania podpisania:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAZWA\tustawia żądaną nazwę tematu (domyślnie: CN=<nazwa-komputera>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U UŻYCIE-ZEWNĘTRZNE\tustawia żądany OID użycia rozszerzonego klucza\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u UŻYCIE-KLUCZA\tustawia żądaną wartość użycia klucza\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAZWA\tustawia żądaną nazwę naczelnika\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D NAZWA-DNS\tustawia żądaną nazwę DNS\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E E-MAIL\tustawia żądany adres e-mail\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A ADRES\tustawia żądany adres IP\n"
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Opcje magistrali:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tłączy się z usługą certmonger przez magistralę systemową\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tłączy się z usługą certmonger przez magistralę sesji\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Inne opcje:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tpolecenie do wykonania przed zapisaniem certyfikatu\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tpolecenie do wykonania po zapisaniu certyfikatu\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr "  -F\tplik, w którym przechowywać certyfikaty CA\n"
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr "  -a\tbaza danych NSS, w której przechowywać certyfikaty CA\n"
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr "  -w\tpróbuje czekać na wydanie certyfikatu\n"
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tzgłasza wszystkie informacje o błędach\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Użycie: %s start-tracking [opcje]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Podczas modyfikowania istniejącego żądania:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAZWA\tpseudonim istniejącego żądania śledzenia\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Jeśli klucze są zaszyfrowane:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAZWA\tpseudonim do nadania śledzonemu żądaniu\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parametry do żądania podpisania w czasie odnowienia:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U UŻYCIE-ZEWNĘTRZNE\tzastępuje żądany OID użycia rozszerzonego klucza\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAZWA\tzastępuje żądaną nazwę naczelnika\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D NAZWA-DNS\tzastępuje żądaną nazwę DNS\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E E-MAIL\tzastępuje żądany adres e-mail\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A ADRES\tzastępuje żądany adres IP\n"
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Użycie: %s stop-tracking [opcje]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Według identyfikatora żądania:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAZWA\tpseudonim dla śledzonego żądania\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Użycie: %s resubmit [opcje]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f PLIK\tplik PEM dla certyfikatu\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Wartości nowych parametrów dla żądania podpisania:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAZWA\tnowy pseudonim przyznany śledzonemu żądaniu\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tużywa podanego CA zamiast bieżącego\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Użycie: %s list [opcje]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Ogólne opcje:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA\twyświetla tylko żądania i certyfikaty powiązane z tym CA\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\twyświetla informacje tylko o oczekujących żądaniach\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\twyświetla informacje tylko o śledzonych certyfikatach\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Jeśli wybrano konkretne żądanie:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d KATALOG\twyświetla tylko żądania i certyfikaty, które używają tej bazy "
 "danych NSS\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAZWA\twyświetla tylko żądania i certyfikaty, które używają tego "
 "pseudonimu\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f PLIK\twyświetla tylko żądania i certyfikaty przechowywane w tym pliku "
 "PEM\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tłączy się z uslugą certmonger przez magistralę systemową\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tłączy się z usługą certmonger przez magistralę sesji\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr "Użycie: %s refresh [opcje]\n"
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr "Użycie: %s status [opcje]\n"
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr "* Wybieranie konkretnego żądania:\n"
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr "* Podczas używania bazy NSS do przechowywania danych:\n"
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr "  -d KATALOG\twyświetla stan żądania w bazie danych NSS\n"
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr "  -n NAZWA\twyświetla stan certyfikatu, który używa tego pseudonimu\n"
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr "* Podczas używania plików do przechowywania:\n"
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
-msgstr ""
-"  -f PLIK\twyświetla stan certyfikatu przechowywanego w tym pliku PEM\n"
+msgstr "  -f PLIK\twyświetla stan certyfikatu przechowywanego w tym pliku PEM\n"
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Użycie: %s list-cas [opcje]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\twyświetla informacje tylko o CA o tej nazwie\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr "Użycie: %s refresh-ca [opcje]\n"
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr "  -c CA\todświeża informacje o CA o tej nazwie\n"
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr "Użycie: %s polecenie [opcje]\n"
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr "żąda nowego certyfikatu z CA\n"
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr "rozpoczyna monitorowanie już wydanego certyfikatu\n"
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr "zatrzymuje monitorowanie certyfikatu\n"
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr "ponownie wysyła trwające żądanie kwalifikacji, lub rozpoczyna nowe\n"
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr "sprawdza stan trwającego żądania kwalifikacji\n"
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr "wyświetla listę monitorowanych i żądanych certyfikatów\n"
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr "sprawdza stan monitorowanego lub żądanego certyfikatu\n"
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr "odświeża pamięć podręczną wszystkich informacji uzyskanych z CA\n"
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: nierozpoznane polecenie\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr "Nie można ustalić położenia serwera LDAP IPA.\n"
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr "Nie można skontaktować się z serwerem IPA LDAP.\n"
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr "Nie można ustalić podstawowego DN informacji domeny na serwerze IPA.\n"
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "Błąd podczas ustawiania dla XML-RPC na kliencie.\n"
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "Opcja -t nie może być używana z opcją -K.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "Opcja -k nie może być używana z opcją -K.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "Opcja -K nie może być używana z opcją -k lub -t.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Nie można określić nazwy naczelnika dla żądania podpisania.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -1328,15 +1678,14 @@ msgstr ""
 "Błąd podczas ustawiania ccache dla usługi \"gospodarza\" na kliencie "
 "używając domyślnej tablicy kluczy: %s.\n"
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 "Błąd podczas ustawiania ccache dla \"%s\" na kliencie używając domyślnej "
 "tablicy kluczy: %s.\n"
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -1345,73 +1694,137 @@ msgstr ""
 "Błąd podczas ustawiania ccache dla usługi \"gospodarza\" na kliencie "
 "używając domyślnej tablicy kluczy \"%s\": %s.\n"
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 "Błąd podczas ustawiania ccache dla \"%s\" na kliencie używając domyślnej "
 "tablicy kluczy \"%s\": %s.\n"
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Użycie: %s [-s|-S] [-n|-f] [-d POZIOM] [-p PLIK] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         używa magistrali sesji\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         używa magistrali systemowej\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr "\t-l         rozpoczyna dedykowane gniazdo nasłuchiwania\n"
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr "\t-L         używa tylko dedykowanego gniazda nasłuchiwania\n"
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr "\t-P ŚCIEŻKA    podaje dedykowane gniazdo nasłuchiwania\n"
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         bez zmiany na demona\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         zmiana na demona\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 "\t-b CZAS    aktywacja przez magistralę, czas oczekiwania na bezczynność\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         bez użycia czasu oczekiwania na bezczynność\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d POZIOM  ustawia poziom debugowania (wymusza opcję -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 "\t-c POLECENIE rozpoczyna POLECENIE i kończy działanie po jego ukończeniu\n"
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p PLIK    zapisuje PID usługi do pliku\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         wymusza przejście NSS do trybu FIPS\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Wystąpił wewnętrzny błąd."
 
@@ -1424,29 +1837,29 @@ msgstr "Nie odnaleziono pasującego wpisu.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Istnieje już CA o pseudonimie \"%s\"."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Nie podano typu przechowywania certyfikatu."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Typ przechowywania certyfikatu \"%s\" nie jest obsługiwany."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Położenie \"%s\" musi być ścieżką bezwzględną."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Nie podano położenia przechowywania certyfikatu."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -1455,19 +1868,19 @@ msgstr ""
 "Nie można uzyskać dostępu do położenia nadrzędnego dla \"%s\" z powodu "
 "niewystarczających uprawnień."
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Nadrzędne położenie \"%s\" musi być prawidłowym katalogiem."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Położenie \"%s\" musi być plikiem."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
@@ -1475,72 +1888,73 @@ msgstr ""
 "Nie można uzyskać dostępu do położenia \"%s\" z powodu niewystarczających "
 "uprawnień."
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Położenie \"%s\" musi być katalogiem."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Nie podano pseudonimu certyfikatu."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Istnieje już żądanie o pseudonimie \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Certyfikat w tym samym położeniu jest już używany przez żądanie o "
 "pseudonimie \"%s\"."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Typ przechowywania klucza \"%s\" nie jest obsługiwany."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "Nie podano położenia przechowywania klucza."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Nie podano pseudonimu klucza."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
-"Klucz w tym samym położeniu jest już używany przez żądanie o pseudonimie \"%s"
-"\"."
+"Klucz w tym samym położeniu jest już używany przez żądanie o pseudonimie "
+"\"%s\"."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Brak obsługi dla typu klucza \"%s\"."
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Nie ma takiego CA."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Nieznane CA \"%s\""
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Nierozpoznany parametr lub błędny typ wartości."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr "Błąd podczas przetwarzania parametrów."
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr "Nierozpoznana nazwa właściwości."
 
diff --git a/po/pt.po b/po/pt.po
index a7845ad..e4f8fcb 100644
--- a/po/pt.po
+++ b/po/pt.po
@@ -1,7 +1,7 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Manuela Silva <manuela.silva@sky.com>, 2014
 # Miguel Sousa <migueljorgesousa@sapo.pt>, 2012
@@ -9,128 +9,184 @@
 # Rui Gouveia <rui.gouveia@gmail.com>, 2011, 2012
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Portuguese (http://www.transifex.com/projects/p/certmonger/"
 "language/pt/)\n"
 "Language: pt\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Não foi possível determinar o nome do servidor do CA.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Incapaz de ler o pedido de assinatura.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Erro ao configurar para XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Erro a analisar a resposta do servidor.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Erro do servidor.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Memória esgotada.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 "O caminho \"%s\" não é absoluto, a tentar utilizar \"%s\" em alternativa.\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -139,165 +195,306 @@ msgstr ""
 "O caminho \"%s\" não é absoluto, e houve um erro ao determinar o nome do "
 "directório actual.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "O caminho \"%s\" não é um directório.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Caminho \"%s\": %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "O caminho \"%s\" não é um ficheiro regular.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Verifique se o serviço do bus de mensagens (D-Bus) está a correr.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Erro ao criar a mensagem de pedido DBus.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Erro %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Erro %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Erro: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Recebida resposta de erro do serviço local %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Não foi recebida uma resposta do serviço %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Erro a inicializar a biblioteca Kerberos: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Não foi possível avaliar o OID \"%s\".\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Erro ao analisar o nome Kerberos principal \"%s\": %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Erro ao analisar novamente o nome Kerberos principal \"%s\": %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: opção requer um argumento -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: opção inválida -- '%c'\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Erro: argumento extra não utilizado \"%s\".\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Erro: foram fornecidos argumentos extra não utilizados.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Localização da base de dados ou nome especificado sem o outro.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
-"Directório da base de dados e do ficheiro do certificado ambos "
-"especificados.\n"
+"Directório da base de dados e do ficheiro do certificado ambos especificados."
+"\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -305,12 +502,12 @@ msgstr ""
 "Não foi especificada uma directoria de base de dados e nome ou um ficheiro "
 "de certificado.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Não é possível gravar a chave e o certicifado no mesmo ficheiro.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -319,1080 +516,1293 @@ msgstr ""
 "O IPA backend necessita o uso da opção -K (nome principal) quando a opção -N "
 "(nome do assunto) é usada.\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Não foi encontrado um CA com o nome \"%s\".\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Erro a definir os argumentos pedidos.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Novo pedido de contratação \"%s\" adicionado.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "O novo pedido de contratação não pode ser adicionado.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Novo pedido de monitorização \"%s\" adicionado.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "O novo pedido de monitorização não pode ser adicionado.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Nenhum ID, directoria da base de dados e nome ou ficheiro do certificado "
 "especificados.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Pedido \"%s\" modificado.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Pedido \"%s\" não pode ser modificado.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Não foi encontrado pedido com a alcunha especificada.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Nenhum pedido encontrado que corresponda aos argumentos.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Pedido \"%s\" removido.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Pedido \"%s\" não pode ser removido.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Erro a modificar \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Reenviar \"%s\" para \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Reenviar \"%s\".\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Erro a tentar enviar \"%s\" para \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Erro a tentar enviar \"%s\".\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Número de certificados e pedidos a serem monitorizados: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID do pedido '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\testado: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\terro-ca: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tpreso: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tarmazenamento par de chaves: tipo=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "NONE"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",localização='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",alcunha='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",ficheiro pin='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertificado: tipo=%s,localização='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\temissor: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tassunto: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\texpira: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "desconhecido"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\tcorreio electrónico: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tnome principal: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tcomando pré-guardado: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttraçagem: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\trenovação automática: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttipo-ca: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tlocalização-ajuda: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tpróximo-número-série: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnomes-emissores-conhecidos:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - ferramenta de registo do certificado do cliente\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Uso: %s pedido [opções]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Argumentos requeridos:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Se usar uma base de dados NSS para armazenamento:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tBase de dados NSS para a chave e certificado\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAME\tnome para o armazenamento NSS (apenas válido com a opção -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAME\tnome de testemunho opcional para o armazenamento NSS (apenas "
 "válido com a opção -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Se usar ficheiros para armazenamento:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE\tFicheiro PEM para a chave privada\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 "  -f FILE\tFicheiro PEM para o certificado (apenas válido com a opção -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Se as chaves são para serem encriptadas:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\tficheiro que contém o PIN de encriptação\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tvalor do PIN\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Argumentos opcionais:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Certificado das configurações:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME\tnome a atribuir ao pedido\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
-msgstr ""
-"  -g SIZE\ttamanho da chave a ser gerada se uma já não estiver em uso\n"
+msgstr "  -g SIZE\ttamanho da chave a ser gerada se uma já não estiver em uso\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\ttentativa de renovação do certificado quando a expiração se aproxima "
 "(por defeito)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tnão tentar renovar o certificado quando a expiração se aproxima\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tusar o CA especificado em vez do por defeito\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parâmetros para o pedido de assinatura:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAME\tdefine o nome do assunto pretendido (omissão: CN=<hostname>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\tdefinir a utilização de chave estendida OID pedida\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME\tdefinir nome principal solicitado\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAME\tdefinir o nome de DNS solicitado\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\tdefinir o endereço de correio electrónico solicitado\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Opções Bus:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tliga ao serviço certmonger no sistema bus\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tliga ao serviço certmonger no bus de sessão\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Outras opções:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\treportar todos os detalhes de erros\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Uso: %s start-tracking [opções]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Se a modificar um pedido existente:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME\tnome de um pedido de monitorização existente\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Se as chaves forem encriptadas:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME\tnome a dar ao pedido de monitorização\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parâmetros para o pedido de assinatura no tempo de renovação:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
-msgstr ""
-"  -U EXTUSAGE\tsobrescreve a utilização de chave estendida OID pedida\n"
+msgstr "  -U EXTUSAGE\tsobrescreve a utilização de chave estendida OID pedida\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME\tsobrescreve nome principal pedido\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\tsobrescreve nome DNS pedido\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\tsobrescreve endereço de e-mail pedido\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Uso: %s stop-tracking [options]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Pelo identificador do pedido:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME\tnome para o pedido de monitorização\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Uso: %s resubmit [opções]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE\tficheiro PEM para certificado\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Novos valores do parâmetro para o pedido de assinatura:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\tnovo nome a dar ao pedido de monitorização\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tusar o CA especificado em vez do actual\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Uso: %s list [opções]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Opções gerais:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA\tlistar apenas pedidos e certificados associados a este CA\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tlista apenas informações sobre pedidos pendentes\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tlistar apenas informação sobre certificados monitorozados\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Se a selecionar um pedido especifico:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR\tlistar apenas pedidos e certificados que utilizem esta base de "
 "dados NSS\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAME\tlistar apenas pedidos e certificados que utilizem esta alcunha\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FILE\tlistar apenas pedidos e certificados armazenados neste ficheiro "
 "PEM\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tliga ao serviço certmonger no sistema bus\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tliga ao serviço certmonger no bus de sessão\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Uso: %s list-cas [opções]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\tlistar apenas informação sobre o CA com este nome\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: comando não reconhecido\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "A opção -t não pode ser utilizada com a opção -K.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "A opção -k não pode ser utilizada com a opção -K.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "A opção -K não pode ser utilizada com as opções -k ou -t.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Incapaz de determinar o nome principal para o pedido de assinatura.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         utilizar barramento da sessão\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         utilizar barramento do sistema\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         não converter em daemon\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         converter em daemon\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 "\t-b TEMPORIZADOR activado-por-barramento, temporizador de inactividade\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         não utilizar um temporizador de inactividade\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d NÍVEL   definir nível de depuração (pressupõe -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p FIC    escrever PID do serviço para ficheiro\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Ocorreu um erro interno."
 
@@ -1405,118 +1815,119 @@ msgstr "Nenhuma entrada correspondente encontrada.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Já existe um CA com nome de utilizador \"%s\"."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Tipo de armazenamento do certificado não especificado."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Tipo de armazenamento do certificado \"%s\" não suportado."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "A localização \"%s\" tem de ser um caminho absoluto."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Localização de armazenamento do certificado não especificado."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "O pai da localização \"%s\" tem de ser uma directoria válida."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "A localização \"%s\" tem de ser um ficheiro."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "A localização \"%s\" tem de ser uma directoria."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Nome do certificado não especificado."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Já existe um pedido com o nome \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
-"Certificado na mesma localização já é utilizado para pedidos com alcunha \"%s"
-"\"."
+"Certificado na mesma localização já é utilizado para pedidos com alcunha "
+"\"%s\"."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Tipo de armazenamento da chave \"%s\" não suportado."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "Localização de armazenamento da chave não especificado."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Nome da chave não especificado."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Chave na mesma localização já é utilizada para pedidos com alcunha \"%s\"."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "CA desconhecido."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Autoridade de certificação \"%s\" desconhecida."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Parâmetro desconhecido ou tipo de valor incorrecto."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/pt_BR.po b/po/pt_BR.po
index 5624b36..45ba6ae 100644
--- a/po/pt_BR.po
+++ b/po/pt_BR.po
@@ -1,7 +1,7 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Cleiton Lima <cleitoncfl@yahoo.com.br>, 2011
 # Fábio Olivé Leite <fabio.olive@gmail.com>, 2013
@@ -9,129 +9,184 @@
 # Marcelo Barbosa <firemanxbr@fedoraproject.org>, 2014
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Portuguese (Brazil) (http://www.transifex.com/projects/p/"
 "certmonger/language/pt_BR/)\n"
 "Language: pt-BR\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Não foi possível determinar nome da máquina do CA.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Não foi possível ler pedido de assinatura.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Erro de criação para XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Erro ao analisar resposta do servidor.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Erro no Servidor.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Sem memória.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr "Nenhum agente de URL (-A) dado e nenhum padrão conhecido.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr "Renovação solicitada, mas não prove número serial.\n"
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr "Nenhuma URL de entidade final (-E) dada e nenhum padrão conhecido\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr "Nenhum agente de URL (-A) dado e nenhum padrão conhecido.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Nenhum perfil/modelo (-T) dada e nenhum padrão conhecido.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr "Erro ao desligar NSS.\n"
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Erro interno: estado desconhecido.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "Erro %d ao conectar em %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Erro %d ao conectar em %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Erro interno: nenhuma resposta para \"%s?%s\".\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
-msgstr ""
-"Caminho \"%s\" não é absoluto, tente usar o \"%s\" em vez disso.\n"
+msgstr "Caminho \"%s\" não é absoluto, tente usar o \"%s\" em vez disso.\n"
 "\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -140,168 +195,308 @@ msgstr ""
 "Caminho \"%s\" não é absoluto, e houve um erro ao determinar o nome do "
 "diretório atual.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr "Caminho \"%s\": permissões insuficiêntes.\n"
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Caminho \"%s\" não é um diretório.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Caminho \"%s\": %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "Caminho \"%s\" não é um arquivo normal.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
 "Por favor verifique se o serviço de barramento de mensagens (D-Bus) está em "
 "execução.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Erro ao criar mensagem de pedido DBus.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Erro %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
-msgstr ""
-"Erro %s\n"
+msgstr "Erro %s\n"
 "\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Erro: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Recebida reposta com erro do serviço local %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Nenhuma resposta recebida do serviço %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Erro ao inicializar biblioteca Kerberos: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Sem suporte para geração \"%s\" chaves.\n"
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr "Conhece tipos de chaves incluídas:"
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Não reconhecido keyUsage \"%s\".\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Não foi possível avaliar OID \"%s\".\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Erro ao analisar nome principal do Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Erro a não analisar o nome principal do Kerberos \"%s\":%s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: opção requer um argumento -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: opção inválida -- '%c'\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Erro: argumento extra não utilizado \"%s\".\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Erro: Argumentos extras não utilizados foram fornecidos.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Localização do banco de dados ou login especificado sem o outro\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 "Diretório do banco de dados e arquivo de certificado, ambos especificados\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -309,12 +504,12 @@ msgstr ""
 "Nenhum diretório e login de banco de dados ou arquivo de certificado "
 "especificado.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "A chave e o certificado não podem ser salvos no mesmo arquivo.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -323,542 +518,674 @@ msgstr ""
 "O backend IPA requer o uso da opção -K (nome do principal) quando a opção -N "
 "(nome do subject) é usada.\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Nenhum CA com o nome \"%s\" encontrado.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Erro ao configurar argumentos do pedido.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Novo pedido de assinatura \"%s\" adicionado.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "O novo pedido de assinatura não pôde ser adicionado.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Nova requisição de rastreamento \"%s\" adicionada.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
-msgstr ""
-"Nova requisição de rastreamento não foi adicionada.\n"
+msgstr "Nova requisição de rastreamento não foi adicionada.\n"
 "\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Nenhum ID, diretório da base de dados e nome de usuário ou arquivo de "
 "certificados especificados.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Pedido \"%s\" modificado.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Requisição \"%s\" não podia ser modificada.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Nenhum pedido encontrado com apelido especificado.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Nenhuma requisição encontrada que tenha argumentos correspondentes.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Pedido \"%s\" removido.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Pedido \"%s\" não pôde ser removido.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Erro ao modificar \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Reenviando \"%s\" para \"%s\".\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Reenviando \"%s\".\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Erro ao tentar enviar \"%s\" para \"%s\".\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Erro ao tentar enviar \"%s\".\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Números de certificados e pedidos sendo rastreados: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID do Pedido '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\"status:%s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\"ca-error:%s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\ttravado: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tarmazenamento do par de chave: tipo=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "NADA"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",localização='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",apelido='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfile='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertificado: tipo=%s,localização='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\temitente: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsubject: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\texpiração: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "desconhecido"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\temail: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tnome do principal: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr "\tEndereço IP: "
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tuso da key: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr "\troot certificados salvo para os arquivos:\n"
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr "\toutro root certificados salvos para os arquivos:\n"
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr "\toutros certificados salvos para os arquivos:\n"
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr "\troot certificados salvos para o banco de dados:\n"
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr "\toutro root certificados salvos para os bancos de dados:\n"
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr "\toutros certificados salvos para os bancos de dados:\n"
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tpre-salva comando: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tpost-salva comando: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tfaixa: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renovar: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr "\tself-identifies como: %s\n"
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-tipo: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tajuda-localização: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tpróximo-serial-número: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnomes-conhecidos-emitente:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr "\tconhecidos perfis/modelos/certificados:\n"
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr "\tpadrão perfil/modelo/certificadotipo: %s\n"
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
-msgstr ""
-"\terro ao atualizar o dado de CA\n"
+msgstr "\terro ao atualizar o dado de CA\n"
 "\n"
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - ferramenta de inscrição de certificado cliente\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Uso: %s pedido [opções]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Argumentos necessários:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "Se estiver utilizando uma base de dados NSS para armazenamento:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tBanco de dados NSS para chave e certificado\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NOME \tapelido para NSS-based armazenamento (válido somente com -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NOME\tnome de token opcional para NSS-based armazenamento (válido "
 "somente com -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Se estiver utilizando arquivos para armazenamento:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k ARQUIVO\tPEM arquivo para chave privada\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f ARQUIVO\tPEM arquivo para certificado (válido somente com -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Se as chaves devem ser criptografadas:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p ARQUIVO\tarquivo que mantém a criptografia PIN\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN valor\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Argumentos opcionais:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Configurações de manejo de certificado:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NOME\tapelido para atribuir ao pedido\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr "  -G TIPO\ttipo de chave para a gerada se um já não esta no local\n"
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g TAMANHO\ttamanho da chave a ser gerada se um já não está neste lugar\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\ttentativa de renovar o certificado quando o vencimento se aproximar "
 "(padrão)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tnão tente renovar o certificado quando se aproxima da expiração\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tuse o CA especificado ao invés do padrão\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -866,504 +1193,505 @@ msgstr ""
 "  -T PERFIL\tperguntar o CA processar a requisição usando o modelo ou perfil "
 "nomeado\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parâmetros para a solicitação de assinatura:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NOME\tnome do assunto solicitado em conjunto (padrão: CN=<hostname>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE conjunto solicitado prolongado uso de chave OID\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\tdefine requisição o valor de uso da chave\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
-msgstr ""
-"  -K NOME\tconjunto solicitado para o nome principal\n"
+msgstr "  -K NOME\tconjunto solicitado para o nome principal\n"
 "\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
-msgstr ""
-"  -D DNSNAME\tconjunto solicitado para o nome do DNS \n"
+msgstr "  -D DNSNAME\tconjunto solicitado para o nome do DNS \n"
 "\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
-msgstr ""
-"  -E EMAIL\tconjunto solicitado para o endereço de email\n"
+msgstr "  -E EMAIL\tconjunto solicitado para o endereço de email\n"
 "\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
-msgstr ""
-"  -A ENDEREÇO\tdefinido requisição de endereço IP\n"
+msgstr "  -A ENDEREÇO\tdefinido requisição de endereço IP\n"
 "\n"
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
-msgstr ""
-"* Bus opções:\n"
+msgstr "* Bus opções:\n"
 "\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 "  -S\t\tconnectado para o serviço de certmonger sobre o barramento do "
 "sistema\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 "  -s\t\tconnectado para o serviço de certmonger sobre o barramento da "
 "sessão\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Outras opções:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
-msgstr ""
-"  -B\tcomando para rodar antes de salvar o certificado\n"
+msgstr "  -B\tcomando para rodar antes de salvar o certificado\n"
 "\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
-msgstr ""
-"  -C\tcomando para rodar após salvar o certificado\n"
+msgstr "  -C\tcomando para rodar após salvar o certificado\n"
 "\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr "  -F\tarquivo para armazenar certificados CA's\n"
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
-msgstr ""
-"  -a\tNSS banco de dados para armazenar certificados CA's\n"
+msgstr "  -a\tNSS banco de dados para armazenar certificados CA's\n"
 "\n"
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
-msgstr ""
-"  -v\treportar todos os detalhes de erros\n"
+msgstr "  -v\treportar todos os detalhes de erros\n"
 "\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
-msgstr ""
-"Use: %s start-tracking [opções]\n"
+msgstr "Use: %s start-tracking [opções]\n"
 "\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Se estiver modificando um pedido existente:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NOME\tapelido de uma solicitação de rastreamento existente\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Se as chaves são criptografadas:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NOME\tapelido para dar à solicitação de rastreamento\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parâmetros para a solicitação de assinatura em tempo de renovação:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\tsubstituir requisição extendida para uso de chave OID\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NOME\tsubstituir o nome principal requerido\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
-msgstr ""
-"  -D DNSNAME\tsubstituir requisição do nome do DNS\n"
+msgstr "  -D DNSNAME\tsubstituir requisição do nome do DNS\n"
 "\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
-msgstr ""
-"  -E EMAIL\tsubstituir requisição do endereço de email\n"
+msgstr "  -E EMAIL\tsubstituir requisição do endereço de email\n"
 "\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
-msgstr ""
-"  -A ENDEREÇO\tsobreescreve requisição de endereço IP\n"
+msgstr "  -A ENDEREÇO\tsobreescreve requisição de endereço IP\n"
 "\n"
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Use: %s stop-tracking [opções]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Por identificador de requisição:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
-msgstr ""
-"  -i NOME\tapelido para rastreamento de requisição\n"
+msgstr "  -i NOME\tapelido para rastreamento de requisição\n"
 "\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Uso: %s reenvio [opções]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
-msgstr ""
-"  -f ARQUIVO\tPEM arquivo para o certificado\n"
+msgstr "  -f ARQUIVO\tPEM arquivo para o certificado\n"
 "\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Novos valores de parâmentro para o pedido de assinatura:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NOME\tnovo apelido para dar a solicitação de rastreamento\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tuse o CA especificado ao invés do atual\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Uso: %s lista [opções]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Opções gerais:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\tlistar somente solicitações e certificados associados com esta CA\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tlistar somente informações sobre solicitações pendentes\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tlistar somente informações sobre certificados rastreados\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Se selecionado um pedido específico:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIRETÓRIO\tsomente lista as requisições e os certificados que usam este "
 "NSS como banco de dados\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NOME\tsomente lista requisições e certificados que usem este apelido\n"
 "\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f ARQUIVO\tsomente lista as requisições e os certificados armazenadas "
 "neste arquivo PEM\n"
 "\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 "  -S\tconectado para o serviço de certmonger sob o barramento do sistema\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 "  -s\tconectado para o serviço de certmonger sob a sessão do barramento\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Use: %s list-cas [opções]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\tlista informações somente sobre o CA com este nome\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr "Uso: %s refresh-ca [opções]\n"
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
-msgstr ""
-"  -c CA\tatualizar informação sobre a CA com este nome\n"
+msgstr "  -c CA\tatualizar informação sobre a CA com este nome\n"
 "\n"
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: comando não reconhecido\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 "Não foi possível determinar a localização do servidor IPA LDAP server.\n"
 "\n"
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr "Não foi possível determinar a base DN do domínio no servidor IPA.\n"
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
-msgstr ""
-"Erro definido para XMLRPC no cliente.\n"
+msgstr "Erro definido para XMLRPC no cliente.\n"
 "\n"
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "A opção -t não pode ser usada com a opção -K.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "A opção -k não pode ser usada com a opção -K.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "A opção -K não pode ser usada com a opção -k ou com a opção -t.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 "Não é possível determinar o nome principal para solicitação de assinatura.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -1372,97 +1700,152 @@ msgstr ""
 "Erro definido ccache para serviço de \"host\" no cliente usando o padrão "
 "keytab: %s.\n"
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 "Erro definido ccache para \"%s\" no cliente usando o padrão keytab: %s.\n"
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
-msgstr ""
-"Erro definido ccache para \"host\" no cliente usando keytab \"%s\": %s.\n"
+msgstr "Erro definido ccache para \"host\" no cliente usando keytab \"%s\": %s.\n"
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
+msgstr "Erro definido ccache para \"%s\" no cliente usando keytab \"%s\": %s.\n"
+
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
 msgstr ""
-"Erro definido ccache para \"%s\" no cliente usando keytab \"%s\": %s.\n"
 
-#: src/main.c:137
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Uso: %s [-s|-S] [-n|-f] [-d NÍVEL] [-p ARQUIVO] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
-msgstr ""
-"\t-s         use a sessão do barramento\n"
+msgstr "\t-s         use a sessão do barramento\n"
 "\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
-msgstr ""
-"\t-S         use o sistema do barramento\n"
+msgstr "\t-S         use o sistema do barramento\n"
 "\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
-msgstr ""
-"\t-n         não se torna um daemon\n"
+msgstr "\t-n         não se torna um daemon\n"
 "\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
-msgstr ""
-"\t-f         torna-se um daemon\n"
+msgstr "\t-f         torna-se um daemon\n"
 "\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b TIMEOUT bus-activated, idle timeout\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
-msgstr ""
-"\t-B         não use um timeout oscioso\n"
+msgstr "\t-B         não use um timeout oscioso\n"
 "\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
-msgstr ""
-"\t-d NIVEL   define depuração de nível(implica -n)\n"
+msgstr "\t-d NIVEL   define depuração de nível(implica -n)\n"
 "\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p ARQUIVO    escreve serviço para o arquivo PID\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         força NSS no FIPS modo\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Um erro interno ocorreu."
 
@@ -1475,29 +1858,29 @@ msgstr "Nenhuma entrada compatível encontrada.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Já existe um CA com o apelido de \"%s\"."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Tipo de armazenamento de certificado não especificado."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Tipo de armazenamento de certificado \"%s\" não suportado."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "O local de \"%s\" deve ser um caminho absoluto."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Localização do armazenamento de certificado não especificada."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -1506,90 +1889,92 @@ msgstr ""
 "O pai da localização \"%s\" não pode ser acessado devido a permissões "
 "insuficientes."
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "O parente de localização \"%s\" deve ser um diretório válido."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "A localização \"%s\" deve ser um arquivo."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 "A localização \"%s\" não pode ser acessada devido a permissões insuficientes."
+""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "A localização \"%s\" deve ser um diretório."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Nome de usuário do certificado não especificado."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Já existe um pedido com o nome de usuário \"%s\"."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Certificado no mesmo local já é utilizado por requisição com o apelido de "
 "\"%s\"."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Tipo de armazenamento de chave \"%s\" não suportado."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "A localização de armazenamento da chave não foi especificada."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Nome de usuário da chave não foi especificado."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Chave no mesmo local já é utilizado por solicitação com o apelido de \"%s\"."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Sem suporte para tipo de chave \"%s\"."
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Não há tal CA."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Autoridade do certificado \"%s\" não conhecida."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Parâmetro não reconhecido ou tipo de valor errado."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr "Erro ao analisar argumentos."
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr "Nome da propriedade não é reconhecida."
 
diff --git a/po/ru.po b/po/ru.po
index 9d292e0..684dfd9 100644
--- a/po/ru.po
+++ b/po/ru.po
@@ -1,133 +1,189 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Stanislav Darchinov <darchinov@gmail.com>, 2011
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Russian (http://www.transifex.com/projects/p/certmonger/"
 "language/ru/)\n"
 "Language: ru\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
-"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && "
+"n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Невозможно определить имя CA\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Невозможно прочесть запрос на подписание.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr ""
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Ошибка сервера.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr ""
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -136,1239 +192,1595 @@ msgstr ""
 "Путь \"%s\" не является абсолютным, определение имени текущего каталога было "
 "выполнено с ошибками.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr ""
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr ""
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
 "Пожалуйста, проверьте, что служба шины сообщений (D-Bus) выполняется.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Ошибка при создании запроса к DBus.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Ошибка %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Ошибка %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Ошибка: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Получен ошибочный ответ от службы %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "От службы %s не был получен ответ.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Ошибка инициализации библиотеки Kerberos: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Не определены каталог базы данных и файл сертификата.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 "Не определены ни каталог базы данных, ни никнейм или файл сертификата.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Ключи и сертификат не могут быть сохранены в один файл.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "CA с именем \"%s\" не найден.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Ошибка установки аргументов запроса.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Новый запрос на подписание \"%s\" добавлен.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Новый запрос на подписание не может быть добавлен.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Не были опрделены ни ID базы данных, ни никнейм или файл сертификата.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Запрос \"%s\" изменен.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Запрос \"%s\" не может быть изменен.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Запрос \"%s\" удален.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Запрос \"%s\" не может быть удален.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Ошибка изменения \"%s\".\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Запрос ID '%s':\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>статус: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-ошибка: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>CA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>тема: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>истекает: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "неизвестный"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>email: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>dns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-тип: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Необходимый аргументы:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* В случае использования для хранения базы данных NSS:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* В случае использования файлов для хранения:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* В случае, если ключи шифруются:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Необязательный аргументы:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Новые значения параметров запроса на подписание:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Основные опции:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: неизвестная команда\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr ""
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr ""
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr ""
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr ""
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr ""
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr ""
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr ""
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Произошла внутренняя ошибка."
 
@@ -1381,115 +1793,116 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "CA  с именем \"%s\" уже существует."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/sv.po b/po/sv.po
index 56f948b..4a901eb 100644
--- a/po/sv.po
+++ b/po/sv.po
@@ -1,132 +1,188 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Göran Uddeborg <goeran@uddeborg.se>, 2011-2013
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Swedish (http://www.transifex.com/projects/p/certmonger/"
 "language/sv/)\n"
 "Language: sv\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Det går inte att avgöra värdnamnet för CA:n.\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Kan inte läsa signeringsbegäran.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Fel vid inställning av XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Fel vid tolkning av svar från servern.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Serverfel.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Slut på minne.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr "Ingen agent-URL (-A) angiven, och inget standardvärde är känt.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr "Förnyelse begärd, men inget serienummer angivet.\n"
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr "Ingen slutposts-URL (-E) angiven, och inget standardvärde är känt.\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr "Ingen agent-URL (-A) angiven, och inget standardvärde är känt.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Ingen profil/mall (-T) angiven, och inget standardvärde är känt.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr "Fel när NSS stängdes av.\n"
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Internt fel: okänt tillstånd.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "Fel %d vid anslutning till %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Fel %d vid anslutning till %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Internt fel: inget svar på ”%s?%s”.\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr "Sökvägen ”%s” är inte absolut, försöker använda ”%s” istället.\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -135,176 +191,316 @@ msgstr ""
 "Sökvägen ”%s” är inte absolut, och det uppstod ett fel när namnet på den "
 "aktuella katalogen skulle bestämmas.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr "Sökvägen ”%s”: otillräckliga rättigheter.\n"
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Sökvägen ”%s” är inte en katalog.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Sökväg ”%s”: %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
-msgstr ""
-"Sökvägen ”%s” är inte normal fil.\n"
+msgstr "Sökvägen ”%s” är inte normal fil.\n"
 "\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Kontrollera att tjänsten meddelandebuss (D-Bus) kör.\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Fel när DBus-meddelandet med begäran skapades.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Fel %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Fel %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Fel: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Mottog felsvar från den lokala tjänsten %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Inget svar mottaget från tjänsten %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr "Tillståndet %s, fast: %s.\n"
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Fel vid initiering av Kerberos bibliotek: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Inget stöd för att generera ”%s”-nycklar.\n"
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr "Kända nyckeltyper inkluderar:"
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Okänd nyckelanvändning ”%s”.\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Det gick inte att beräkna OID ”%s”.\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fel vid tolkning av Kerberos-huvudnamn ”%s”: %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fel vid avtolkning av Kerberos-huvudnamn ”%s”: %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr "%s: ogiltigt värde -- ”%s”\n"
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: flaggan kräver ett argument -- ”%c”\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: felaktig flagga -- ”%c”\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Fel: oanvänt extra argument ”%s”.\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Fel: oanvända extra argument gavs.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Databasplats eller smeknamn angivet utan den andra.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Databaskatalog och certifikatfil båda angivna.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr "Ingen av databaskatalog och smeknamn eller certifikatfil angiven.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Nyckeln och certifikatet kan inte båda sparas i samma fil.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -313,538 +509,671 @@ msgstr ""
 "IPA-backänden kräver användning av -K-flaggan (huvudnamn) när -N-flaggan "
 "(ämnesnamn) används.\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Ingen CA med namnet ”%s” hittades.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Fel vid inställning av argument till begäran.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Nya begäran om signering ”%s” tillagd.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Nya begäran om signering kunde inte läggas till.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Ny spårningsbegäran ”%s” tilllagd.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Nya spårningsbegäran kunde inte läggas till.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Ingen av ID eller databaskatalog och smeknamn eller certifikatfil filen "
 "angiven.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Begäran ”%s” ändrad.\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Begäran ”%s” kunde inte ändras.\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Ingen begäran hittades med angivet smeknamn.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Ingen begäran hittades som matchade argumenten.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Begäran ”%s” borttagen.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Begäran ”%s” kunde inte tas bort.\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Fel när ”%s” ändrades.\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Skickar om ”%s” till ”%s”.\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Skickar om ”%s”.\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Fel vid försök att skicka ”%s” till ”%s”.\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Fel vid försök att skicka ”%s”.\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr "Begärans-ID ”%s” uppdateras.\n"
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr "Begärans-ID ”%s” uppdateras INTE.\n"
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Antalet certifikat och spårade begäran: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Begärans-id ”%s”:\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tstatus: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-fel: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tfastnat: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tnyckelparslagring: typ=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "INGEN"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",plats=”%s”"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",smeknamn=”%s”"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",symbol=”%s”"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin=”%s”"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pin-fil=”%s”"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertifikat: typ=%s,plats=”%s”"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tutgivare: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tämne: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tlöper ut: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "okänt"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\te-post: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\thuvudnamn: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr "\tIP-adress: "
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tnyckelanvändning: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr "\trotcertifikat sparades i filer:\n"
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr "\tandra rotcertifikat sparades i filer:\n"
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr "\tandra certifikat sparades i filer:\n"
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr "\trotcertifikat sparades i databaser:\n"
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr "\tandra rotcertifikat sparades i databaser:\n"
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr "\tandra certifikat sparades i databaser:\n"
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tkommando före det sparas: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tkommando efter det sparas: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tspår: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-förnyelse: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA ”%s”:\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr "\tsjälvidentifierar som: %s\n"
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-typ: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\thjälparplats: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tnästa-serienummer: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tkänt utfärdarnamn:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr "\tkända profiler/mallar/certifikattyper:\n"
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr "\tstandardprofil/-mall/-certifikattyp: %s\n"
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr "Varken CA-smeknamn eller -a-flaggan angavs.\n"
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr "Data för CA ”%s” uppdateras.\n"
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr "Data för namnlös CA uppdateras.\n"
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr "\tfel vid uppdatering av CA-data\n"
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - registreringsverktyg för klientcertifikat\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Användning: %s request [flaggor]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Obligatoriska argument:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Om du använder en NSS-databas för lagring:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d KAT\tNSS-databas för nyckel och cert\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr "  -n NAMN\tsmeknamn för NSS-baserad lagring (endast giltigt med -d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAMN\tfrivilligt symbolnamn för NSS-baserad lagring (endast giltig med -"
 "d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Om du använder filer för lagring:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FIL\tPEM-fil för privat nyckel\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FIL\tPEM-fil för certifikat (endast giltigt med -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Om nycklar skall krypteras:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FIL\tfil som håller PIN för kryptering\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN-värde\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Valfria argument:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Inställningar för certifikathantering:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAMN\tsmeknamn att tilldela till begäran\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr "  -G TYPE\ttyp av nyckel att genereras om det inte redan finns en\n"
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g STORLEK\tstorlek på nyckel som skall genereras om det inte redan finns "
 "en\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tförsök att förnya certifikatet när utgångsdatumet närmar sig "
 "(standard)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
-msgstr ""
-"  -R\t\tförsök inte förnya certifikatet när utgångsdatumet närmar sig\n"
+msgstr "  -R\t\tförsök inte förnya certifikatet när utgångsdatumet närmar sig\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tanvänd angiven CA istället för standard\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -852,458 +1181,474 @@ msgstr ""
 "  -T PROFIL\tbe CA:n att bearbeta begäran med användning av den angivna "
 "profilen eller mallen\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parametrar för signeringsbegäran:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N NAMN\tställ in begärt ämnesnamn (standard: CN=<värdnamn>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTANV\tställ in begärd förlängd nyckelanvändning-OID\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u NYCELANVÄNDNING\tsätt angivet värde på nyckelanvändning\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAMN\tställ in begärt huvudnamn\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNS-NAMN\tställ in begärt DNS-namn\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EPOST\tställ in begärd e-postadress\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A ADRESS\tange begärd IP-adress\n"
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Bussflaggor:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tanslut till tjänsten certmonger på systembussen\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tanslut till tjänsten certmonger på sessionsbussen\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Andra flaggor:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tkommando att köra före certifikatet sparas\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tkommando att köra efter certifikatet sparas\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr "  -F\tfil i vilken CA:ns certifikat skall lagras\n"
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr "  -a\tNSS-databas i vilken CA:ns certifikat skall lagras\n"
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr "  -w\tförsök att vänta på att certifikatet ges ut\n"
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\trapportera alla detaljer om fel\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Användning: %s start-tracking [flaggor]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* Om du ändrar en befintlig begäran:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAMN\tsmeknamn på en befintlig spårningsbegäran\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Om nycklarna är krypterade:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAMN\tsmeknamn att ge på spårningbegäran\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parametrar för signeringsbegäran vid förnyelsetidpunkten:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTANV\tåsidosätt begärd förlängd nyckelanvändning-OID\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAMN\tåsidosätt begärt huvudnamn\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNS-NAMN\tåsidosätt begärt DNS-namn\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\tåsidosätt begärd e-postadress\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A ADRESS\tåsidosätt begärd IP-adress\n"
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Användning: %s stop-tracking [flaggor]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* Enligt identifierare för begäran:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAMN\tsmeknamn för spårningsbegäran\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Användning: %s resubmit [flaggor]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FIL\tPEM-fil för certifikat\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nya parametervärden för signeringsbegäran:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAMN\tnytt smeknamn för att ge till spårningsbegäran\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tanvänd den angivna CA:n istället för den nuvarande\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Användning: %s list [flaggor]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Allmänna flaggor:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
-msgstr ""
-"  -c CA\tlista endast begäran och certifikat associerade med denna CA\n"
+msgstr "  -c CA\tlista endast begäran och certifikat associerade med denna CA\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tlista endast information om utestående begäran\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tlista endast information om spårade certifikat\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* Om du väljer en viss begäran:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d KAT\tlista endast begäran och certifikat som använder denna NSS-"
 "databas\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAMN\tlista endast begäran och certifikat som använder detta smeknamn\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
-msgstr ""
-"  -f FIL\tlista endast begäran och certifikat lagrade i denna PEM-fil\n"
+msgstr "  -f FIL\tlista endast begäran och certifikat lagrade i denna PEM-fil\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tanslut till tjänsten certmonger på systembussen\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tanslut till tjänsten certmonger på sessionsbussen\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr "Användning: %s refresh [flaggor]\n"
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr "Användning: %s status [flaggor]\n"
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr "* Väljer en viss begäran:\n"
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr "* När en NSS-databas används för lagring:\n"
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr "  -d KAT\treturnera status för begäran i denna NSS-databas\n"
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 "  -n NAMN\treturnera status för certifikatet som använder detta smeknamn\n"
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr "* När filer används för lagring:\n"
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr "  -f FIL\treturnera status för certifikatet lagrat i denna PEM-fil\n"
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Användning: %s list-cas [flaggor]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\tlista endast information om CA:n med detta namn\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr "Användning: %s refresh-ca [flaggor]\n"
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr "  -c CA\tuppdatera information om CA:n med detta namn\n"
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: okänt kommando\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr "Kan inte avgöra platsen för IPA LDAP-servern.\n"
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr "Kan inte avgöra bas-DN för domäninformation på IPA-servern.\n"
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "Fel när det sattes upp för XMLRPC på klienten.\n"
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "Flaggan -t kan inte användas med flaggan -K.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "Flaggan -k kan inte användas med flaggan -K.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "Flaggan -K kan inte användas med vare sig flaggan -k eller -t.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Det går inte att avgöra huvudnamn för signeringsbegäran.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -1312,15 +1657,14 @@ msgstr ""
 "Fel när ccache sattes upp för tjänsten ”host” på klienten med "
 "standardnyckeltabell: %s.\n"
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
-"Fel när ccache sattes upp för ”%s” på klienten med standardnyckeltabell: "
-"%s.\n"
+"Fel när ccache sattes upp för ”%s” på klienten med standardnyckeltabell: %s."
+"\n"
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -1329,70 +1673,135 @@ msgstr ""
 "Fel när ccache sattes upp för tjänsten ”host” på klienten med användning av "
 "nyckeltabellen ”%s”: %s.\n"
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
-"Fel när ccache sattes upp för ”%s” på klienten med nyckeltabellen ”%s”: %s.\n"
+"Fel när ccache sattes upp för ”%s” på klienten med nyckeltabellen ”%s”: %s."
+"\n"
+
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
 
-#: src/main.c:137
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Användning: %s [-s|-S] [-n|-f] [-d NIVÅ] [-p FIL] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         använd sessionsbussen\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         använd systembussen\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         bli inte en demon\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         bli en demon\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b TIDSGRÄNS bussaktiverad, tidsgräns vid inaktivitet\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         använd inte en tidsgräns vid inaktivitet\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d NIVÅ    sätt felsökningsnivån (medför -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p FIL     skriv tjänstens PID till filen\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         tvinga in NSS i FIPS-läge\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Ett internt fel har uppstått."
 
@@ -1405,29 +1814,29 @@ msgstr "Inga matchande post funnen.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Det finns redan en CA med smeknamnet ”%s”."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Lagringstyp för certifikat inte angiven."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Lagringstyp ”%s” för certifikat stödjs inte."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Platsen ”%s” måste vara en absolut sökväg."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Lagringsplats för certifikat inte angiven."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -1436,87 +1845,88 @@ msgstr ""
 "Föräldern till platsen ”%s” kunde inte nås på grund av otillräckliga "
 "rättigheter."
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Förälder till platsen ”%s” måste vara en giltig katalog."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Platsen ”%s” måste vara en fil."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr "Platsen ”%s” kunde inte nås på grund av otillräckliga rättigheter."
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Platsen ”%s” måste vara en katalog."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Certifikatsmeknamn inte angivet."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Det finns redan en begäran med smeknamnet ”%s”."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Certifikat på samma plats används redan av av begäran med smeknamnet ”%s”."
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Nyckellagringstypen ”%s” stödjs inte."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "Nyckellagringsplats inte angiven."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Nyckelsmeknamn inte angivet."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr "Nyckel på samma plats används redan av begäran med smeknamnet ”%s”."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Inget stöd för nyckeltypen ”%s”."
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Ingen sådan CA."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Certifikatmyndighet ”%s” inte känd."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Okända parameter eller fel värdetyp."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr "Fel vid argumenttolkning."
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr "Okänt egenskapsnamn."
 
diff --git a/po/ta.po b/po/ta.po
index 5e2e624..cfdb562 100644
--- a/po/ta.po
+++ b/po/ta.po
@@ -1,1368 +1,1780 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Felix I <ifelix25@gmail.com>, 2011
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Tamil (http://www.transifex.com/projects/p/certmonger/"
 "language/ta/)\n"
 "Language: ta\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr ""
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr ""
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr ""
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
 msgstr ""
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr ""
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr ""
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr ""
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr ""
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr ""
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr ""
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr ""
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>CA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr ""
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr ""
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr ""
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr ""
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr ""
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr ""
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr ""
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -1375,115 +1787,116 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/tr.po b/po/tr.po
index 9db22aa..89786cb 100644
--- a/po/tr.po
+++ b/po/tr.po
@@ -1,1368 +1,1780 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Hasan Alp İNAN <hasanalpinan@gmail.com>, 2011
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Turkish (http://www.transifex.com/projects/p/certmonger/"
 "language/tr/)\n"
 "Language: tr\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr ""
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Sunucu hatası.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr ""
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
 msgstr ""
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr ""
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr ""
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr ""
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Hata %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Hata %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Hata: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr ""
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>durum: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-hatası: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>CA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>eposta: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>dns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-tipi: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr ""
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr ""
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr ""
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr ""
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr ""
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr ""
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr ""
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -1375,115 +1787,116 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/uk.po b/po/uk.po
index dbf2e29..194abba 100644
--- a/po/uk.po
+++ b/po/uk.po
@@ -1,140 +1,196 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Nalin Dahyabhai <nalin@fedoraproject.org>, 2011
 # Yuri Chornoivan <yurchor@ukr.net>, 2011-2014
 # Yuri Chornoivan <yurchor@ukr.net>, 2013
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Ukrainian (http://www.transifex.com/projects/p/certmonger/"
 "language/uk/)\n"
 "Language: uk\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
-"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
-"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && "
+"n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Не вдалося визначити назву вузла служби сертифікації (CA).\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Не вдалося прочитати запит щодо підпису.\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "Помилка встановлення XMLRPC.\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Помилка обробки відповіді сервера.\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "Помилка сервера.\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "Не вистачає пам'яті.\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 "Не вказано адреси агента (-A), типове значення адреси також невідоме.\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr "Надіслано запит щодо поновлення, але не надано серійного номера.\n"
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 "Не вказано завершального запису адреси (-E), типове значення запису також "
 "невідоме.\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 "Не вказано адреси агента (-A), типове значення адреси також невідоме.\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Не вказано профілю або шаблону (-T), типове значення також невідоме.\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr "Помилка під час спроби завершення роботи NSS.\n"
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "Внутрішня помилка: невідомий стан.\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "Помилка %d під час спроби встановлення з’єднання з %s: %s.\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "Помилка %d під час спроби з’єднатися з %s.\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "Внутрішня помилка: немає відповіді на «%s?%s».\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr ""
 "Шлях «%s» не є абсолютним, спробуємо замість нього скористатися «%s».\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
@@ -143,177 +199,318 @@ msgstr ""
 "Шлях «%s» не є абсолютним, спроба визначення назви поточного каталогу також "
 "зазнала невдачі.\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr "Шлях «%s»: недостатні права доступу.\n"
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "Шлях «%s» не вказує на каталог.\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "Шлях «%s»: %s.\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "Шлях «%s» не вказує на звичайний файл.\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Будь ласка, перевірте, чи працює служба каналу повідомлень (D-Bus).\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "Помилка під час спроби створення повідомлення запиту до DBus.\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "Помилка %s: %s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "Помилка %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "Помилка: %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "Отримано повідомлення про помилку від локальної служби %s.\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "Не отримано відповіді від служби %s.\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr "Стан %s, прив’язка: %s.\n"
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Помилка під час ініціалізації бібліотеки Kerberos: %s.\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Підтримки створення ключів «%s» не передбачено.\n"
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr "Серед відомих типів ключів такі:"
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Нерозпізнане значення використання ключа «%s».\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Не вдалося визначити OID «%s».\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Помилка під час обробки реєстраційного запису Kerberos «%s»: %s.\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Помилка під час пакування реєстраційного запису Kerberos «%s»: %s.\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr "%s: некоректне значення — «%s»\n"
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: разом з параметром слід вказати аргумент -- «%c»\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: некоректний параметр — «%c»\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Помилка: зайвий аргумент «%s».\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Помилка: було вказано невикористовувані зайві аргументи.\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 "Вказано адресу бази даних або псевдонім без визначення іншого необхідного "
 "елемента.\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Одночасно вказано каталог бази даних і файл сертифіката.\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 "Не вказано ні каталогу бази даних з псевдонімом, ні файла сертифіката.\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Ключ і сертифікат не можна зберігати у одному файлі.\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -322,543 +519,677 @@ msgstr ""
 "Сервер IPA потребує використання параметра -K (назви реєстраційного запису), "
 "якщо використано параметр -N (призначення).\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Не виявлено служби сертифікації (CA) з назвою «%s».\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Помилка під час спроби встановлення параметрів запиту.\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Додано новий запит «%s» щодо підписування.\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Не вдалося додати новий запит щодо підписування.\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Додано новий запит «%s» щодо стеження.\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Не вдалося додати новий запит щодо стеження.\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 "Не вказано ні ідентифікатора, ні каталогу бази даних з псевдонімом, ні файла "
 "сертифіката.\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Змінено запит «%s».\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Не вдалося змінити запит «%s».\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Не виявлено запиту з вказаним псевдонімом.\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Запиту, що відповідає аргументам, не виявлено.\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Запит «%s» вилучено.\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Не вдалося вилучити запит «%s».\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Помилка під час спроби змінити «%s».\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Повторне надсилання «%s» до «%s».\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Повторне надсилання «%s».\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Помилка під час спроби надсилання «%s» до «%s».\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Помилка під час спроби надсилання «%s».\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr "Оновлюємо ідентифікатор запиту «%s».\n"
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr "Не оновлюємо ідентифікатор запиту «%s».\n"
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Кількість сертифікатів та запитів, за якими ведеться стеження: %d.\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Ідентифікатор запиту «%s»:\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tстан: %s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-помилка: %s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tприв’язка: %s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tсховище пар ключів: тип=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "Немає"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",розташування=«%s»"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",псевдонім=«%s»"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",ключ=«%s»"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",пін-код=«%s»"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",пін-файл=«%s»"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tсертифікат: тип=%s,розташування=«%s»"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tвидавець: %s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tпризначення: %s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tзавершення дії: %s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "невідоме"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\tел. пошта: "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tреєстраційний запис: "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr "\tIP-адреса: "
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tвикористання ключа: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr "\tкореневі сертифікати, збережені до файлів:\n"
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr "\tінші кореневі сертифікати, збережені до файлів:\n"
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr "\tінші сертифікати, збережені до файлів:\n"
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr "\tкореневі сертифікати, збережені до баз даних:\n"
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr "\tінше кореневі файли, збережені до баз даних:\n"
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr "\tінші сертифікати, збережені до баз даних:\n"
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tкоманда до збереження: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tкоманда після збереження: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tстеження: %s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tавтооновлення: %s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "Служба сертифікації «%s»:\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr "\tсамоідентифікація: %s\n"
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-тип: %s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tадреса допоміжної програми: %s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tнаступний серійний номер: %s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tвідомі назви видавця:\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr "\tвідомі профілі, шаблони, типи сертифікатів:\n"
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr "\tтиповий профіль, шаблон або тип сертифіката: %s\n"
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr "Не вказано ні псевдоніма CA, ні прапорця -a.\n"
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr "Оновлюємо дані для CA «%s».\n"
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr "Оновлюємо дані для CA без назви.\n"
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr "\tпомилка під час спроби оновлення даних CA\n"
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s — інструмент реєстрації клієнтських сертифікатів\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Використання: %s request [параметри]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "Обов’язкові аргументи:\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Якщо для зберігання даних використовується база даних NSS:\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d КАТАЛОГ\tБаза даних ключів і сертифікатів NSS\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n НАЗВА\tпсевдонім сховища на основі NSS (працюватиме, лише якщо вказано -"
 "d)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t НАЗВА\tдодаткова назва ключа до заснованого на NSS сховища "
 "(працюватиме, лише якщо вказано -d)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* Якщо для зберігання даних використовуються файли:\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k ФАЙЛ\tФайл PEM закритого ключа\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f ФАЙЛ\tФайл PEM сертифіката (працюватиме, лише якщо вказано -k)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Якщо ключі слід зашифрувати:\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p ФАЙЛ\tФайл, у якому зберігається PIN-код шифрування\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tЗначення PIN-коду шифрування\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "Необов’язкові аргументи:\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* Параметри обробки сертифікатів:\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I НАЗВА\tпсевдонім, який слід пов’язати з запитом\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 "  -G ТИП\tтип ключа, який слід створити, якщо не буде виявлено готового\n"
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g РОЗМІР\tрозмір ключа, який слід створити, якщо не буде виявлено "
 "готового, у бітах\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tСпробувати оновити сертифікат, якщо наближається завершення строку "
 "дії (типова поведінка)\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tНе намагатися оновити сертифікат, якщо наближається завершення "
 "строку дії\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 "  -c CA\t\tвикористовувати вказану службу сертифікації (CA), а не типову\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -866,479 +1197,499 @@ msgstr ""
 "  -T ПРОФІЛЬ\tпопросити CA обробити запит з використанням вказаного профілю "
 "або шаблона\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* Параметри запиту щодо підписування:\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N НАЗВА\tВстановити бажане призначення (Типово: CN=<назва вузла>)\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U ДОД.ВИКОР.\tВстановити додаткове використання ключа за допомогою OID\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u ВИКОРИСТАННЯ встановити вказане значення використання ключа\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K НАЗВА\tВстановити вказану назву реєстраційного запису\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D НАЗВА-DNS\tвстановити вказану назву за DNS\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E ЕЛ.ПОШТА\tвстановити вказану адресу електронної пошти\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A АДРЕСА\tвстановити вказану IP-адресу\n"
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* Параметри каналу зв’язку:\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 "  -S\t\tВстановити зв’язок зі службою certmonger за допомогою системного "
 "каналу\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
-"  -s\t\tВстановити зв’язок зі службою certmonger за допомогою каналу сеансу\n"
+"  -s\t\tВстановити зв’язок зі службою certmonger за допомогою каналу "
+"сеансу\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* Інші параметри:\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tкоманда, яку слід виконати до збереження сертифіката\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tкоманда, яку слід виконати після збереження сертифіката\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr "  -F\tфайл, у якому слід зберігати сертифікати CA\n"
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr "  -a\tбаза даних NSS, у якій слід зберігати сертифікати CA\n"
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr "  -w\tспробувати зачекати на момент випуску сертифіката\n"
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tповідомляти про всі дані щодо помилок\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Використання: %s start-tracking [параметри]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* У разі зміни існуючого запиту:\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i НАЗВА\tПсевдонім існуючого запиту щодо стеження\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* Якщо ключі зашифровано:\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I НАЗВА\tПсевдонім, який слід пов’язати з запитом щодо стеження\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Параметри запиту щодо підписування під час оновлення:\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U ДОД.ВИКОР.\tПеревизначити додаткове використання ключа за допомогою "
 "OID\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K НАЗВА\tПеревизначити вказану назву реєстраційного запису\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D НАЗВА-DNS\tПеревизначити вказану назву за DNS\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E ЕЛ.ПОШТА\tПеревизначити вказану адресу електронної пошти\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A АДРЕСА\tперевизначити вказану IP-адресу\n"
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Використання: %s stop-tracking [параметри]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* За ідентифікатором запиту:\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i НАЗВА\tПсевдонім запиту щодо стеження\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Використання: %s resubmit [параметри]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f ФАЙЛ\tФайл PEM сертифіката\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Нові значення параметрів запиту щодо підписування:\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 "  -I НАЗВА\tНовий псевдонім, який слід пов’язати з запитом щодо стеження\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 "  -c CA\t\tВикористовувати вказану службу сертифікації (CA), а не поточну\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Використання: %s list [параметри]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* Загальні параметри:\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\tПоказати список лише тих запитів та сертифікатів, які пов’язано з "
 "вказаною службою сертифікації (CA)\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tПоказати лише відомості щодо нетипових запитів\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
-"  -t\tПоказати лише відомості щодо сертифікатів, за якими ведеться стеження\n"
+"  -t\tПоказати лише відомості щодо сертифікатів, за якими ведеться "
+"стеження\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* У разі вибору певного запиту:\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d КАТАЛОГ\tпоказувати список лише тих запитів і сертифікатів, які "
 "використовують цю базу даних NSS\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -d НАЗВА\tпоказувати список лише тих запитів і сертифікатів, які "
 "використовують цю назву\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f ФАЙЛ\tпоказувати список лише тих запитів і сертифікатів, які "
 "зберігаються у цьому файлі PEM\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 "  -S\tВстановити зв’язок зі службою certmonger за допомогою системного "
 "каналу\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 "  -s\tВстановити зв’язок зі службою certmonger за допомогою каналу сеансу\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr "Користування: %s refresh [параметри]\n"
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr "Користування: %s status [параметри]\n"
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr "* Вибір певного запиту:\n"
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr "* Якщо використовуємо базу даних NSS для зберігання:\n"
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr "  -d КАТ\tповернути стан для запиту у вказаній базі даних NSS\n"
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 "  -n НАЗВА\tповернути стан для сертифіката, який використовує вказаний "
 "псевдонім\n"
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr "* Якщо використовуємо файли для зберігання даних:\n"
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 "  -f ФАЙЛ\tповернути стан для сертифіката, що зберігається у вказаному файлі "
 "PEM\n"
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Використання: %s list-cas [параметри]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 "  -c CA\tПоказати лише відомості щодо служби сертифікації (CA) з вказаною "
 "назвою\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr "Користування: %s refresh-ca [параметри]\n"
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr "  -c CA\tоновити дані щодо CA із вказаною назвою\n"
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: невідома команда\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr "Не вдалося визначити розташування сервера LDAP IPA.\n"
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr "Не вдалося визначити базовий DN даних щодо домену на сервері IPA.\n"
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "Помилка встановлення XMLRPC на боці клієнта.\n"
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "Параметр -t не можна використовувати разом з параметром -K.\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "Параметр -k не можна використовувати разом з параметром -K.\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "Параметр -K не можна використовувати разом з параметрами -k і -t.\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 "Не вдалося визначити назву реєстраційного запису запиту щодо підписування.\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -1347,15 +1698,14 @@ msgstr ""
 "Помилка встановлення ccache для служби «host» на боці клієнта за допомогою "
 "типового сховища ключів: %s.\n"
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 "Помилка встановлення ccache для «%s» на боці клієнта за допомогою типової "
 "таблиці ключів: %s.\n"
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -1364,73 +1714,137 @@ msgstr ""
 "Помилка встановлення ccache для служби «host» на боці клієнта за допомогою "
 "сховища ключів «%s»: %s.\n"
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 "Помилка встановлення ccache для «%s» на боці клієнта за допомогою сховища "
 "ключів «%s»: %s.\n"
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "Використання: %s [-s|-S] [-n|-f] [-d РІВЕНЬ] [-p ФАЙЛ] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         використовувати канал даних сеансу\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         використовувати канал даних системи\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n         не запускати у режимі фонової служби\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         запустити у режимі фонової служби\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 "\t-b ЧАС_ОЧІКУВАННЯ задіяння каналу даних, час очікування у стані "
 "бездіяльності\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B         не використовувати час очікування у стані бездіяльності\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d РІВЕНЬ  встановити рівень діагностики (використовується -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr "\t-p ФАЙЛ    записати PID служби до файла\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         примусово перевести NSS у режим FIPS\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "Сталася внутрішня помилка."
 
@@ -1443,29 +1857,29 @@ msgstr "Відповідного запису не знайдено.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Служба сертифікації (CA) з псевдонімом «%s» вже існує."
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "Тип сховища сертифікатів не вказано."
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Підтримки типу сховищ сертифікатів «%s» не передбачено."
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Адресою «%s» має бути абсолютний шлях."
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "Адресу сховища сертифікатів не вказано."
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -1473,88 +1887,90 @@ msgid ""
 msgstr ""
 "Батьківська тека адреси «%s» недоступна через недостатні права доступу."
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Батьківським каталогом адреси «%s» має бути коректний каталог."
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Адресою «%s» має бути файл."
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr "Адреса «%s» недоступна через недостатні права доступу."
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Адресою «%s» має бути каталог."
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "Псевдонім сертифіката не вказано."
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Запит з псевдонімом «%s» вже існує."
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 "Сертифікат з цією адресою вже використовується за запитом з псевдонімом «%s»."
+""
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Підтримки типу сховищ ключів «%s» не передбачено."
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "Адресу сховища ключів не вказано."
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "Псевдонім ключа не вказано."
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Ключ з цією адресою вже використовується за запитом з псевдонімом «%s»."
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Підтримки ключів типу «%s» не передбачено."
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "Такої служби сертифікації (CA) не виявлено."
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Невідома служба сертифікації «%s»."
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Невідомий параметр або помилковий тип значення."
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr "Помилка під час спроби обробити аргументи."
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr "Нерозпізнана назва властивості."
 
diff --git a/po/zh_CN.po b/po/zh_CN.po
index 7e7aeb0..bb438bf 100644
--- a/po/zh_CN.po
+++ b/po/zh_CN.po
@@ -1,7 +1,7 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # alanzheng <machinecat1666@gmail.com>, 2011
 # Huan Chen <chenhuan126@126.com>, 2011
@@ -12,1375 +12,1784 @@
 # Wei Liu <LLIU@REDHAT.COM>, 2012
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Chinese (China) (http://www.transifex.com/projects/p/"
 "certmonger/language/zh_CN/)\n"
 "Language: zh-CN\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "无法确定CA的主机名。\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "无法读取签名请求。\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "设置 xmlrpc 时出错。\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "分析服务器响应时出错。\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "服务器出错。\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
 msgstr "内存不足。\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, fuzzy, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr "未指定中间代理 URL (-A)，且无已知默认值。\n"
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr "未指定结尾条目 URL (-E)，且无已知默认值。\n"
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr "未指定中间代理 URL (-A)，且无已知默认值。\n"
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "未指定预置文件/模板 (-T)，且无已知默认值。\n"
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr "内部错误: 未知的状态。\n"
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr "错误 %d 连接至 %s: %s。\n"
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr "错误 %d 连接至 %s。\n"
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr "内部错误:  \"%s?%s\" 没有响应。\n"
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr "路径 \"%s\" 并非绝对路径，尝试使用 \"%s\" 替代。\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
 msgstr "路径 %s 不是绝对路径，并且确定当前目录时出错。\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "路径 \"%s\" 并不是一个目录。\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "路径 \"%s\": %s。\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "路径 \"%s\" 并不是一个普通文件。\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "请检验信息总线（D-Bus）服务是否正在运行。\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "创建 DBus 请求消息时出错。\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "错误 %s：%s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "错误 %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "错误： %s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "从本地 %s 服务收到错误响应。\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "没有从 %s 服务收到响应。\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "初始化 Kerberos 库时出错：%s\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "未识别的 keyUsage \"%s\"。\n"
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "无法估计 OID“%s”。\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "解析 Kerberos 实体名“%s”时出错：%s。\n"
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "反解析 Kerberos 主机名 “%s”时出错：%s。\n"
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: 操作需要一个参数 -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: 无效的选项 -- '%c'\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "错误：未使用的额外参数 \"%s\"。\n"
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "错误：输入了额外未使用的参数。\n"
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "数据库位置或别名缺一不可。\n"
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "数据库目录和证书文件都已指定。\n"
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr "没有指定数据库目录和别名，或证书文件。\n"
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "密钥和证书不能保存到同一个文件。\n"
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr "当使用 -N 选项（主题名）时，IPA 后端要求使用 -K 选项（实体名）。\n"
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "没有找到具有名称“%s”的 CA.\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "设定请求参数时出错。\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "新的签名请求“%s”已添加。\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "新的签名请求无法添加。\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "新的跟踪请求“%s”已添加。\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "新的跟踪请求无法添加。\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr "没有指定 ID 、数据库目录和别名，或证书文件。\n"
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "请求 “%s”已修改。\n"
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "请求“%s”无法修改。\n"
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "未找到包含指定昵称的请求。\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "没有找到匹配参数的请求。\n"
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "请求“%s”已移除。\n"
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "请求“%s”无法移除。\n"
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "修改“%s”时出错。\n"
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "正在重新提交“%s”到“%s”。\n"
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "正在重新提交“%s”。\n"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "试图提交“%s”到“%s”时出错。\n"
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "试图提交“%s”时出错。\n"
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "正在跟踪的证书和请求数量：%d\n"
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "请求 ID '%s'：\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "    状态：%s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "    CA 错误：%s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "    死机：%s\n"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "    密钥对存储：type=%s"
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "无"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr ",location='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",nickname='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfile='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "证书：type=%s,location='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "    CA：%s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "    发行者：%s\n"
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "    主题：%s\n"
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "    到期时间：%s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "未知"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "    电子邮件： "
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "    DNS： "
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "    实体名： "
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\t密钥用法: %s\n"
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "    EKU："
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\t保存前命令: %s\n"
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\t保存后命令: %s\n"
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "    跟踪：%s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "    自动更新：%s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s'：\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "    CA 类型：%s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "    helper 位置：%s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "    下个序列号：%s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "    已知发行者名称：\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - 客户端证书登记工具\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "用法：%s request [options]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "所需参数：\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* 如果使用 NSS 数据库作为存储：\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR    密钥和证书的NSS 数据库\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr "  -n NAME    基于 NSS 的存储的别名（只在同时使用 -d 时有效）\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr "-t NAME    基于 NSS 的存储的可选令牌名（只在同时使用 -d 时有效）\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* 如果使用文件作为存储：\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE    私钥的PEM 文件\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE    证书的 PEM 文件（只在同时使用 -k 时有效）\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* 如果密钥要被加密：\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE    保存加密 PIN 的文件\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN    PIN 值\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "可选参数：\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* 证书处理设置：\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
-msgstr ""
-"  -I NAME    要分配给请求的别名\n"
+msgstr "  -I NAME    要分配给请求的别名\n"
 "\n"
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr "  -g SIZE    要生成的密钥大小，如果密钥不存在\n"
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr "  -r     在临近到期时试图更新证书（默认）\n"
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr "  -R    不在临近到期时试图更新证书\n"
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA    使用指定的 CA 而不是默认 CA\n"
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr "  -T 预置文件\t要求 CA 使用指名的预置文件或模板处理请求\n"
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr "* 签名请求的参数：\n"
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N NAME     设定所需的主题名（默认：CN=<主机名>）\n"
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE    设定所需的扩展密钥使用 OID\n"
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\t设定请求的密钥用法值\n"
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME    设定所需实体名\n"
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "   -D DNSNAME    设定所需的 DNS 名\n"
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "    -E EMAIL    设定所需的电子邮件地址\n"
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* 总线选项：\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S    在系统总线上连接到的 certmonger 服务\n"
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s    在会话总线上连接到的 certmonger 服务\n"
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* 其他选项：\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\t在保存证书前运行的命令\n"
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\t在保存证书后运行的命令\n"
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v    报告所有错误细节\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "用法：%s start-tracking [options]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr "* 如果修改现存请求：\n"
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME    现存跟踪请求的别名\n"
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* 如果密钥已加密：\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME    要指定于跟踪请求的别名\n"
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* 签名请求在更新时的参数：\n"
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE    覆盖所需的扩展密钥使用 OID\n"
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME    覆盖所需的实体名\n"
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME    覆盖所需的 DNS 名\n"
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL    覆盖所需的电子邮件地址\n"
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "用法：%s stop-tracking [选项]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr "* 由请求标识符：\n"
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME    跟踪请求的别名\n"
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "用法：%s resubmit [选项]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE    证书的 PEM 文件\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr "* 签名请求的新参数值：\n"
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME    要指定于跟踪请求的新别名\n"
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA    使用指定的 CA 而不是当前的\n"
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "用法：%s list [选项]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* 一般选项：\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA    只列出与此 CA 关联的请求和证书\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r    只列出未解决请求的相关信息\n"
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t    只列出被跟踪证书的相关信息\n"
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr "* 如果选择一个特定的需求：\n"
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
-"  -d 目录<span class=\"whitespace other\" title=\"Tab\">»</span>仅列出使用该 "
-"NSS 数据库的请求和认证\n"
+"  -d 目录<span class=\"whitespace other\" title=\"Tab\">»</span>仅列出使用该 NSS "
+"数据库的请求和认证\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
-"  -n 名称<span class=\"whitespace other\" title=\"Tab\">»</span>仅显示使用该"
-"名称的请求和认证\n"
+"  -n 名称<span class=\"whitespace other\" title=\"Tab\">»</"
+"span>仅显示使用该名称的请求和认证\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
-"  -f 文件<span class=\"whitespace other\" title=\"Tab\">»</span>仅列出保存在"
-"此 PEM 文件中的请求和认证\n"
+"  -f 文件<span class=\"whitespace other\" title=\"Tab\">»</span>仅列出保存在此 PEM "
+"文件中的请求和认证\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S    在系统总线上连接 certmonger 服务\n"
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s    在会话总线上连接 certmonger 服务\n"
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "用法：%s list-cas [选项]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA    只列出具有此名称的 CA 的相关信息\n"
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s：未识别命令\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
-msgstr ""
-"选项 -t 不可跟选项 -K 共同使用。\n"
+msgstr "选项 -t 不可跟选项 -K 共同使用。\n"
 "\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "选项 -k 不可跟选项 -K 共同使用。\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "选项 -K 不可跟选项 -k 或选项 -t 共同使用。\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "无法确定签名请求的实体名。\n"
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr "用法: %s [-s|-S] [-n|-f] [-d 级别] [-p 文件] [-F]\n"
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr "\t-s         使用和会话总线\n"
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         使用系统总线\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr "\t-n        不成为守护进程\n"
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr "\t-f         成为守护进程\n"
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr "\t-b TIMEOUT 使用总线激活, idle 超时\n"
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr "\t-B        不使用 idle 超时\n"
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d LEVEL   设定调试级别 (使用 -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
-msgstr ""
-"\t-p FILE    在文件中写入服务 PID\n"
+msgstr "\t-p FILE    在文件中写入服务 PID\n"
 "\n"
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         强制 NSS 进入 FIPS 模式\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "发生一个内部错误。"
 
@@ -1393,115 +1802,116 @@ msgstr "没有找到匹配的条目。\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "具有别名“%s”的 CA 已经存在。"
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "证书存储类型没有指定。"
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "证书存储类型“%s”不支持。"
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "位置“%s”必须是绝对路径。"
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "证书存储位置没有指定。"
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "位置“%s”的上一层必须是有效目录。"
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "位置“%s”必须是文件。"
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "位置“%s”必须是目录。"
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "证书别名没有指定。"
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "具有别名“%s”的请求已经存在。"
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr "在相同位置的认证已经被包含昵称 \"%s\" 的请求使用。"
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "密钥存储类型“%s”不支持。"
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "密钥存储位置没有指定。"
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "密钥别名没有指定。"
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr "在相同位置的键已经被包含昵称 \"%s\" 的请求使用。"
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "没有该 CA。"
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "证书认证中心“%s”未知。"
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "未识别的参数或错误的值类型。"
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""
 
diff --git a/po/zh_TW.po b/po/zh_TW.po
index 54d6bfa..a981b6e 100644
--- a/po/zh_TW.po
+++ b/po/zh_TW.po
@@ -1,1373 +1,1782 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-#
+# 
 # Translators:
 # Cheng-Chia Tseng <pswo10680@gmail.com>, 2011
 # Walter Cheuk <wwycheuk@gmail.com>, 2012
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.77\n"
+"Project-Id-Version: certmonger 0.77.2\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2015-04-13 19:19-0400\n"
+"POT-Creation-Date: 2015-04-29 11:43-0400\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
 "PO-Revision-Date: 2014-11-11 05:00-0500\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Chinese (Taiwan) (http://www.transifex.com/projects/p/"
 "certmonger/language/zh_TW/)\n"
 "Language: zh-TW\n"
-"MIME-Version: 1.0\n"
-"Content-Type: text/plain; charset=UTF-8\n"
-"Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 "X-Generator: Zanata 3.6.2\n"
 
-#: src/certmaster.c:129
+#: src/certmaster.c:136
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "無法判斷 CA 的主機名稱。\n"
 
-#: src/certmaster.c:146 src/dogtag.c:560 src/ipa.c:745
+#: src/certmaster.c:152 src/dogtag.c:517 src/ipa.c:756
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "無法讀取簽署請求。\n"
 
-#: src/certmaster.c:176
+#: src/certmaster.c:177
 #, c-format
 msgid "Error setting up for XMLRPC.\n"
 msgstr "設置 XMLRPC 時發生錯誤。\n"
 
-#: src/certmaster.c:198 src/getcert.c:471 src/getcert.c:490 src/getcert.c:509
-#: src/getcert.c:528 src/getcert.c:546 src/getcert.c:637 src/getcert.c:1224
-#: src/getcert.c:1562 src/getcert.c:1995 src/getcert.c:2078 src/getcert.c:2493
-#: src/getcert.c:2667 src/getcert.c:2692 src/getcert.c:2883 src/getcert.c:2987
-#: src/getcert.c:3022 src/getcert.c:3057 src/getcert.c:3094 src/getcert.c:3329
-#: src/getcert.c:3745 src/getcert.c:3863 src/getcert.c:4044
+#: src/certmaster.c:199 src/getcert.c:487 src/getcert.c:506 src/getcert.c:525
+#: src/getcert.c:544 src/getcert.c:562 src/getcert.c:653 src/getcert.c:1336
+#: src/getcert.c:1704 src/getcert.c:2231 src/getcert.c:2316 src/getcert.c:2870
+#: src/getcert.c:3092 src/getcert.c:3120 src/getcert.c:3341 src/getcert.c:3445
+#: src/getcert.c:3480 src/getcert.c:3515 src/getcert.c:3552 src/getcert.c:3803
+#: src/getcert.c:4256 src/getcert.c:4371 src/getcert.c:4564
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "解析伺服器回應時發生錯誤。\n"
 
-#: src/certmaster.c:202
+#: src/certmaster.c:203
 #, c-format
 msgid "Server error.\n"
 msgstr "伺服器錯誤。\n"
 
-#: src/dogtag.c:254
+#: src/dogtag.c:224
 #, c-format
 msgid "Profile params (-O) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:261 src/dogtag.c:266 src/dogtag.c:283 src/dogtag.c:288
-#: src/getcert.c:277
+#: src/dogtag.c:231 src/dogtag.c:236 src/dogtag.c:253 src/dogtag.c:258
+#: src/getcert.c:293
 #, c-format
 msgid "Out of memory.\n"
-msgstr ""
-"記憶體不足。\n"
+msgstr "記憶體不足。\n"
 "\n"
 
-#: src/dogtag.c:276
+#: src/dogtag.c:246
 #, c-format
 msgid "Submit params (-o) must be in the form of param=value.\n"
 msgstr ""
 
-#: src/dogtag.c:451 src/dogtag.c:456 src/dogtag.c:485
+#: src/dogtag.c:405 src/dogtag.c:410 src/dogtag.c:439
 #, c-format
 msgid "No agent credentials specified, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:461
+#: src/dogtag.c:415
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
 msgstr ""
 
-#: src/dogtag.c:465
+#: src/dogtag.c:419
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:470 src/dogtag.c:480 src/dogtag.c:628
+#: src/dogtag.c:424 src/dogtag.c:434 src/dogtag.c:585
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:475
+#: src/dogtag.c:429
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
-#: src/dogtag.c:495
+#: src/dogtag.c:449
 #, c-format
 msgid "Error shutting down NSS.\n"
 msgstr ""
 
-#: src/dogtag.c:530 src/dogtag.c:810
+#: src/dogtag.c:484 src/dogtag.c:768
 #, c-format
 msgid "Internal error: unknown state.\n"
 msgstr ""
 
-#: src/dogtag.c:634
+#: src/dogtag.c:591
 #, c-format
 msgid "No agent credentials (-n) given, but they are needed.\n"
 msgstr ""
 
-#: src/dogtag.c:790
+#: src/dogtag.c:748
 #, c-format
 msgid "Error %d connecting to %s: %s.\n"
 msgstr ""
 
-#: src/dogtag.c:795
+#: src/dogtag.c:753
 #, c-format
 msgid "Error %d connecting to %s.\n"
 msgstr ""
 
-#: src/dogtag.c:803
+#: src/dogtag.c:761
 #, c-format
 msgid "Internal error: no response to \"%s?%s\".\n"
 msgstr ""
 
-#: src/getcert.c:99
+#: src/getcert.c:61 src/main.c:84
+msgid "COMMAND"
+msgstr ""
+
+#: src/getcert.c:62
+msgid "DIRECTORY"
+msgstr ""
+
+#: src/getcert.c:63 src/getcert.c:70
+msgid "LIST"
+msgstr ""
+
+#: src/getcert.c:64 src/getcert.c:68
+msgid "ADDRESS"
+msgstr ""
+
+#: src/getcert.c:65 src/main.c:85
+msgid "FILENAME"
+msgstr ""
+
+#: src/getcert.c:66
+msgid "HOSTNAME"
+msgstr ""
+
+#: src/getcert.c:67
+msgid "ID"
+msgstr ""
+
+#: src/getcert.c:69
+msgid "BITS"
+msgstr ""
+
+#: src/getcert.c:71
+msgid "MODE"
+msgstr ""
+
+#: src/getcert.c:72
+msgid "NAME"
+msgstr ""
+
+#: src/getcert.c:73
+msgid "PRINCIPAL"
+msgstr ""
+
+#: src/getcert.c:74
+msgid "SUBJECT"
+msgstr ""
+
+#: src/getcert.c:75
+msgid "URL"
+msgstr ""
+
+#: src/getcert.c:76
+msgid "USERNAME[:GROUPNAME]"
+msgstr ""
+
+#: src/getcert.c:115
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
 msgstr "\"%s\" 並非絕對路徑，改為使用 \"%s\"。\n"
 
-#: src/getcert.c:104
+#: src/getcert.c:120
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
 msgstr "路徑「%s」非絕對路徑，並且在判斷目前目錄的名稱時發生錯誤。\n"
 
-#: src/getcert.c:126
+#: src/getcert.c:142
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
 msgstr ""
 
-#: src/getcert.c:132
+#: src/getcert.c:148
 #, c-format
 msgid "Path \"%s\" is not a directory.\n"
 msgstr "\"%s\" 路徑並非目錄。\n"
 
-#: src/getcert.c:138
+#: src/getcert.c:154
 #, c-format
 msgid "Path \"%s\": %s.\n"
 msgstr "路徑 \"%s\"：%s。\n"
 
-#: src/getcert.c:178
+#: src/getcert.c:194
 #, c-format
 msgid "Path \"%s\" is not a regular file.\n"
 msgstr "\"%s\" 路徑並非普通檔案。\n"
 
-#: src/getcert.c:341
+#: src/getcert.c:357
 #, c-format
 msgid "No system bus running.\n"
 msgstr ""
 
-#: src/getcert.c:342
+#: src/getcert.c:358
 #, c-format
 msgid "Running as UID 0.\n"
 msgstr ""
 
-#: src/getcert.c:343
+#: src/getcert.c:359
 #, c-format
 msgid "Launching temporary dedicated service daemon.\n"
 msgstr ""
 
-#: src/getcert.c:372
+#: src/getcert.c:388
 #, c-format
 msgid "Error connecting to D-Bus.\n"
 msgstr ""
 
-#: src/getcert.c:373 src/tdbusm.c:2163
+#: src/getcert.c:389 src/tdbusm.c:2163
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "請驗證訊息匯流排 (D-Bus) 服務是否正在執行。\n"
 
-#: src/getcert.c:380
+#: src/getcert.c:396
 #, c-format
 msgid "Error creating DBus request message.\n"
 msgstr "建立 DBus 請求訊息時發生錯誤。\n"
 
-#: src/getcert.c:422
+#: src/getcert.c:438
 #, c-format
 msgid "Error %s: %s\n"
 msgstr "錯誤 %s：%s\n"
 
-#: src/getcert.c:426
+#: src/getcert.c:442
 #, c-format
 msgid "Error %s\n"
 msgstr "錯誤 %s\n"
 
-#: src/getcert.c:432
+#: src/getcert.c:448
 #, c-format
 msgid "Error: %s\n"
 msgstr "錯誤：%s\n"
 
-#: src/getcert.c:434
+#: src/getcert.c:450
 #, c-format
 msgid "Received error response from local %s service.\n"
 msgstr "從本地 %s 服務接收到錯誤回應。\n"
 
-#: src/getcert.c:440
+#: src/getcert.c:456
 #, c-format
 msgid "No response received from %s service.\n"
 msgstr "沒有從 %s 服務接收到回應。\n"
 
-#: src/getcert.c:642 src/getcert.c:3334
+#: src/getcert.c:658 src/getcert.c:3808
 #, c-format
 msgid "State %s, stuck: %s.\n"
 msgstr ""
 
-#: src/getcert.c:710 src/getcert.c:1610 src/getcert.c:2133
+#: src/getcert.c:719 src/getcert.c:1753 src/getcert.c:2375 src/getcert.c:2949
+#: src/getcert.c:3201 src/getcert.c:3706
+msgid "NSS database for key and cert"
+msgstr ""
+
+#: src/getcert.c:720 src/getcert.c:1754 src/getcert.c:2376 src/getcert.c:2950
+#: src/getcert.c:3202 src/getcert.c:3707
+msgid "nickname for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:721 src/getcert.c:1755 src/getcert.c:2377 src/getcert.c:2951
+#: src/getcert.c:3203 src/getcert.c:3708
+msgid "optional token name for NSS-based storage (only valid with -d)"
+msgstr ""
+
+#: src/getcert.c:722
+msgid "PEM file for private key"
+msgstr ""
+
+#: src/getcert.c:723
+msgid "PEM file for certificate (only valid with -k)"
+msgstr ""
+
+#: src/getcert.c:724 src/getcert.c:1758 src/getcert.c:2383
+msgid "file which holds the private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:725 src/getcert.c:1759 src/getcert.c:2384
+msgid "private key encryption PIN"
+msgstr ""
+
+#: src/getcert.c:726 src/getcert.c:1760 src/getcert.c:2385
+msgid "owner information for private key"
+msgstr ""
+
+#: src/getcert.c:727 src/getcert.c:1761 src/getcert.c:2386
+msgid "file permissions for private key"
+msgstr ""
+
+#: src/getcert.c:728 src/getcert.c:1762 src/getcert.c:2387
+msgid "owner information for certificate"
+msgstr ""
+
+#: src/getcert.c:729 src/getcert.c:1763 src/getcert.c:2388
+msgid "file permissions for certificate"
+msgstr ""
+
+#: src/getcert.c:730 src/getcert.c:1764 src/getcert.c:2389
+msgid "NSS database in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:731 src/getcert.c:1765 src/getcert.c:2390
+msgid "file in which to store the CA's certificates"
+msgstr ""
+
+#: src/getcert.c:732 src/getcert.c:1766 src/getcert.c:2391
+msgid "command to run before saving the certificate"
+msgstr ""
+
+#: src/getcert.c:733 src/getcert.c:1767 src/getcert.c:2392
+msgid "command to run after saving the certificate"
+msgstr ""
+
+#: src/getcert.c:734
+msgid "nickname to assign to the request"
+msgstr ""
+
+#: src/getcert.c:735
+msgid "type of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:736
+msgid "size of key to be generated if one is not already in place"
+msgstr ""
+
+#: src/getcert.c:737 src/getcert.c:1770
+msgid "attempt to renew the certificate when expiration nears (default)"
+msgstr ""
+
+#: src/getcert.c:738 src/getcert.c:1771
+msgid "don't attempt to renew the certificate when expiration nears"
+msgstr ""
+
+#: src/getcert.c:740 src/getcert.c:1773
+msgid "use the specified CA configuration rather than the default"
+msgstr ""
+
+#: src/getcert.c:742 src/getcert.c:1775 src/getcert.c:2396
+msgid "ask the CA to process the request using the named profile or template"
+msgstr ""
+
+#: src/getcert.c:743 src/getcert.c:2397
+msgid "set requested subject name (default: CN=<hostname>)"
+msgstr ""
+
+#: src/getcert.c:744 src/getcert.c:2398
+msgid "set requested key usage value"
+msgstr ""
+
+#: src/getcert.c:745 src/getcert.c:2399
+msgid "set requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:746 src/getcert.c:2400
+msgid "set requested principal name"
+msgstr ""
+
+#: src/getcert.c:747 src/getcert.c:2401
+msgid "set requested DNS name"
+msgstr ""
+
+#: src/getcert.c:748 src/getcert.c:2402
+msgid "set requested email address"
+msgstr ""
+
+#: src/getcert.c:749 src/getcert.c:2403
+msgid "set requested IP address"
+msgstr ""
+
+#: src/getcert.c:750 src/getcert.c:1783 src/getcert.c:2405
+msgid "file which holds an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:751 src/getcert.c:1782 src/getcert.c:2404
+msgid "an optional challenge password value"
+msgstr ""
+
+#: src/getcert.c:752 src/getcert.c:1784 src/getcert.c:2406
+msgid "try to wait for the certificate to be issued"
+msgstr ""
+
+#: src/getcert.c:753 src/getcert.c:1785 src/getcert.c:2407 src/getcert.c:2954
+#: src/getcert.c:3206 src/getcert.c:3711 src/getcert.c:3868 src/getcert.c:4099
+#: src/getcert.c:4194 src/getcert.c:4289 src/getcert.c:4415 src/getcert.c:4502
+msgid "connect to the certmonger service on the session bus"
+msgstr ""
+
+#: src/getcert.c:754 src/getcert.c:1786 src/getcert.c:2408 src/getcert.c:2955
+#: src/getcert.c:3207 src/getcert.c:3712 src/getcert.c:3869 src/getcert.c:4100
+#: src/getcert.c:4195 src/getcert.c:4290 src/getcert.c:4416 src/getcert.c:4503
+msgid "connect to the certmonger service on the system bus"
+msgstr ""
+
+#: src/getcert.c:771 src/getcert.c:1795 src/getcert.c:2417
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "初始化 Kerberos 函式庫時發生錯誤：%s。\n"
 
-#: src/getcert.c:759
+#: src/getcert.c:835 src/getcert.c:2486
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:761
+#: src/getcert.c:837 src/getcert.c:2488
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:798 src/getcert.c:1685 src/getcert.c:2183
+#: src/getcert.c:874 src/getcert.c:1885 src/getcert.c:2510
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:808 src/getcert.c:1695 src/getcert.c:2193
+#: src/getcert.c:884 src/getcert.c:1895 src/getcert.c:2520
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "無法評估 OID 「%s」。\n"
 
-#: src/getcert.c:819 src/getcert.c:1706 src/getcert.c:2204
+#: src/getcert.c:895 src/getcert.c:1906 src/getcert.c:2531
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:828 src/getcert.c:1715 src/getcert.c:2213
+#: src/getcert.c:904 src/getcert.c:1915 src/getcert.c:2540
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:883 src/getcert.c:1770 src/getcert.c:2268
+#: src/getcert.c:959 src/getcert.c:1970 src/getcert.c:2595
 #, c-format
 msgid "%s: invalid value -- '%s'\n"
 msgstr ""
 
-#: src/getcert.c:902 src/getcert.c:1794 src/getcert.c:2287 src/getcert.c:2605
-#: src/getcert.c:2812 src/getcert.c:3283 src/getcert.c:3413 src/getcert.c:3627
-#: src/getcert.c:3711 src/getcert.c:3809 src/getcert.c:3930 src/getcert.c:4010
+#: src/getcert.c:982 src/getcert.c:1998 src/getcert.c:2618 src/getcert.c:3025
+#: src/getcert.c:3265 src/getcert.c:3903
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s：選項必需引數 -- '%c'\n"
 
-#: src/getcert.c:906 src/getcert.c:1797 src/getcert.c:2290 src/getcert.c:2608
-#: src/getcert.c:2815 src/getcert.c:3286 src/getcert.c:3416 src/getcert.c:3630
-#: src/getcert.c:3714 src/getcert.c:3812 src/getcert.c:3933 src/getcert.c:4013
+#: src/getcert.c:986 src/getcert.c:2001 src/getcert.c:2621 src/getcert.c:3029
+#: src/getcert.c:3269 src/getcert.c:3906
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s：選項無效 -- '%c'\n"
 
-#: src/getcert.c:915
+#: src/getcert.c:999
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:918 src/getcert.c:1808 src/getcert.c:2298 src/getcert.c:2623
-#: src/getcert.c:2823 src/getcert.c:3294 src/getcert.c:3424 src/getcert.c:3643
-#: src/getcert.c:3732 src/getcert.c:3835 src/getcert.c:3951 src/getcert.c:4026
+#: src/getcert.c:1002 src/getcert.c:2016 src/getcert.c:2633 src/getcert.c:3048
+#: src/getcert.c:3281 src/getcert.c:3768 src/getcert.c:3918 src/getcert.c:4149
+#: src/getcert.c:4243 src/getcert.c:4343 src/getcert.c:4464 src/getcert.c:4546
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:924 src/getcert.c:1814 src/getcert.c:2022 src/getcert.c:2322
+#: src/getcert.c:1008 src/getcert.c:2022 src/getcert.c:2258 src/getcert.c:2657
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:930 src/getcert.c:1820 src/getcert.c:2028 src/getcert.c:2328
+#: src/getcert.c:1014 src/getcert.c:2028 src/getcert.c:2264 src/getcert.c:2663
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:938 src/getcert.c:2036 src/getcert.c:2336
+#: src/getcert.c:1022 src/getcert.c:2272 src/getcert.c:2671
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:945 src/getcert.c:1836
+#: src/getcert.c:1029 src/getcert.c:2044
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:972
+#: src/getcert.c:1056
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:1118 src/getcert.c:1528 src/getcert.c:1937 src/getcert.c:2356
-#: src/getcert.c:2631 src/getcert.c:2831 src/getcert.c:4033
+#: src/getcert.c:1230 src/getcert.c:1670 src/getcert.c:2173 src/getcert.c:2733
+#: src/getcert.c:3056 src/getcert.c:3289 src/getcert.c:4553
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "找不到名稱為「%s」的 CA。\n"
 
-#: src/getcert.c:1219 src/getcert.c:1557 src/getcert.c:1989 src/getcert.c:2073
-#: src/getcert.c:2487 src/getcert.c:3740 src/getcert.c:3858 src/getcert.c:3877
-#: src/getcert.c:3961 src/getcert.c:4039
+#: src/getcert.c:1331 src/getcert.c:1699 src/getcert.c:2225 src/getcert.c:2311
+#: src/getcert.c:2864 src/getcert.c:4251 src/getcert.c:4366 src/getcert.c:4385
+#: src/getcert.c:4474 src/getcert.c:4559
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "設定請求參數時發生錯誤。\n"
 
-#: src/getcert.c:1230
+#: src/getcert.c:1342
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "已加入新增的簽署請求「%s」。\n"
 
-#: src/getcert.c:1236
+#: src/getcert.c:1348
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "無法加入新增的簽署請求。\n"
 
-#: src/getcert.c:1568
+#: src/getcert.c:1710
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "已加入新增的追蹤請求「%s」。\n"
 
-#: src/getcert.c:1575
+#: src/getcert.c:1717
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "無法加入新增的追蹤請求。\n"
 
-#: src/getcert.c:1829 src/getcert.c:2617
+#: src/getcert.c:1756
+msgid "PEM file for private key (only valid with -f)"
+msgstr ""
+
+#: src/getcert.c:1757 src/getcert.c:2378 src/getcert.c:2952 src/getcert.c:3204
+#: src/getcert.c:3709
+msgid "PEM file for certificate"
+msgstr ""
+
+#: src/getcert.c:1768
+msgid "nickname of an existing request"
+msgstr ""
+
+#: src/getcert.c:1769
+msgid "nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:1776
+msgid "override requested key usage value"
+msgstr ""
+
+#: src/getcert.c:1777
+msgid "override requested extended key usage OID"
+msgstr ""
+
+#: src/getcert.c:1778
+msgid "override requested principal name"
+msgstr ""
+
+#: src/getcert.c:1779
+msgid "override requested DNS name"
+msgstr ""
+
+#: src/getcert.c:1780
+msgid "override requested email address"
+msgstr ""
+
+#: src/getcert.c:1781
+msgid "override requested IP address"
+msgstr ""
+
+#: src/getcert.c:2037 src/getcert.c:3042
 #, c-format
 msgid ""
-"None of ID or database directory and nickname or certificate file "
-"specified.\n"
+"None of ID or database directory and nickname or certificate file specified."
+"\n"
 msgstr ""
 
-#: src/getcert.c:2003
+#: src/getcert.c:2239
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:2007
+#: src/getcert.c:2243
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:2015 src/getcert.c:2315 src/getcert.c:2838 src/getcert.c:3302
+#: src/getcert.c:2251 src/getcert.c:2650 src/getcert.c:3296 src/getcert.c:3776
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "找不到指定暱稱的請求。\n"
 
-#: src/getcert.c:2064 src/getcert.c:2342 src/getcert.c:2849 src/getcert.c:3313
+#: src/getcert.c:2302 src/getcert.c:2677 src/getcert.c:3307 src/getcert.c:3787
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:2083
+#: src/getcert.c:2321
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:2087
+#: src/getcert.c:2325
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2501
+#: src/getcert.c:2379 src/getcert.c:2953 src/getcert.c:3205 src/getcert.c:3710
+msgid "nickname for tracking request"
+msgstr ""
+
+#: src/getcert.c:2380
+msgid "new nickname to give to tracking request"
+msgstr ""
+
+#: src/getcert.c:2381
+msgid "type of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2382
+msgid "size of new key to be generated"
+msgstr ""
+
+#: src/getcert.c:2394
+msgid "use the specified CA configuration rather than the current one"
+msgstr ""
+
+#: src/getcert.c:2878
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2517
+#: src/getcert.c:2894
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2520
+#: src/getcert.c:2897
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2906
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2532
+#: src/getcert.c:2909
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2710
+#: src/getcert.c:2945
+msgid "refresh information about all outstanding requests"
+msgstr ""
+
+#: src/getcert.c:2947
+msgid ""
+"refresh information only for requests using the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3138
 #, c-format
 msgid "Request ID '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2712
+#: src/getcert.c:3140
 #, c-format
 msgid "Request ID '%s' NOT being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:2860
+#: src/getcert.c:3196
+msgid "list only information about outstanding requests"
+msgstr ""
+
+#: src/getcert.c:3197
+msgid "list only information about tracked certificates"
+msgstr ""
+
+#: src/getcert.c:3199
+msgid "list only requests and certs associated with this CA configuration"
+msgstr ""
+
+#: src/getcert.c:3318
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:3009
+#: src/getcert.c:3467
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "請求 ID「%s」：\n"
 
-#: src/getcert.c:3010
+#: src/getcert.c:3468
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\t狀態：%s\n"
 
-#: src/getcert.c:3014
+#: src/getcert.c:3472
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-錯誤：%s\n"
 
-#: src/getcert.c:3016
+#: src/getcert.c:3474
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:3036
+#: src/getcert.c:3494
 msgid "NONE"
 msgstr "無"
 
-#: src/getcert.c:3038
+#: src/getcert.c:3496
 #, c-format
 msgid ",location='%s'"
 msgstr "、位置='%s'"
 
-#: src/getcert.c:3041 src/getcert.c:3063
+#: src/getcert.c:3499 src/getcert.c:3521
 #, c-format
 msgid ",nickname='%s'"
 msgstr "、暱稱='%s'"
 
-#: src/getcert.c:3044 src/getcert.c:3066
+#: src/getcert.c:3502 src/getcert.c:3524
 #, c-format
 msgid ",token='%s'"
 msgstr "、token='%s'"
 
-#: src/getcert.c:3047
+#: src/getcert.c:3505
 #, c-format
 msgid ",pin='%s'"
 msgstr "、pin='%s'"
 
-#: src/getcert.c:3050
+#: src/getcert.c:3508
 #, c-format
 msgid ",pinfile='%s'"
 msgstr "、pin檔案='%s'"
 
-#: src/getcert.c:3061
+#: src/getcert.c:3519
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\t憑證：類型=%s、位置='%s'"
 
-#: src/getcert.c:3077
+#: src/getcert.c:3535
 #, c-format
 msgid "\tsigning request thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3082
+#: src/getcert.c:3540
 #, c-format
 msgid "\tsigning request thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3099
+#: src/getcert.c:3557
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA：%s\n"
 
-#: src/getcert.c:3101
+#: src/getcert.c:3559
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:3102
+#: src/getcert.c:3560
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:3103
+#: src/getcert.c:3561
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\t失效日期：%s\n"
 
-#: src/getcert.c:3106
+#: src/getcert.c:3564
 msgid "unknown"
 msgstr "未知"
 
-#: src/getcert.c:3109
+#: src/getcert.c:3567
 msgid "\temail: "
 msgstr "\t電郵："
 
-#: src/getcert.c:3115
+#: src/getcert.c:3573
 msgid "\tdns: "
 msgstr "\tdns："
 
-#: src/getcert.c:3121
+#: src/getcert.c:3579
 msgid "\tprincipal name: "
 msgstr "\tprincipal 名稱："
 
-#: src/getcert.c:3129
+#: src/getcert.c:3587
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:3148
+#: src/getcert.c:3606
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:3152
+#: src/getcert.c:3610
 msgid "\teku: "
 msgstr "\teku："
 
-#: src/getcert.c:3160
+#: src/getcert.c:3618
 #, c-format
 msgid "\tcertificate template/profile: %s\n"
 msgstr ""
 
-#: src/getcert.c:3166 src/getcert.c:3489
+#: src/getcert.c:3624 src/getcert.c:3983
 #, c-format
 msgid "\troot certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3175 src/getcert.c:3498
+#: src/getcert.c:3633 src/getcert.c:3992
 #, c-format
 msgid "\tother root certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3184 src/getcert.c:3507
+#: src/getcert.c:3642 src/getcert.c:4001
 #, c-format
 msgid "\tother certificates saved to files:\n"
 msgstr ""
 
-#: src/getcert.c:3193 src/getcert.c:3516
+#: src/getcert.c:3651 src/getcert.c:4010
 #, c-format
 msgid "\troot certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3202 src/getcert.c:3525
+#: src/getcert.c:3660 src/getcert.c:4019
 #, c-format
 msgid "\tother root certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3211 src/getcert.c:3534
+#: src/getcert.c:3669 src/getcert.c:4028
 #, c-format
 msgid "\tother certificates saved to databases:\n"
 msgstr ""
 
-#: src/getcert.c:3216 src/getcert.c:3580
+#: src/getcert.c:3674 src/getcert.c:4074
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3219 src/getcert.c:3586
+#: src/getcert.c:3677 src/getcert.c:4080
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:3222
+#: src/getcert.c:3680
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttrack：%s\n"
 
-#: src/getcert.c:3226
+#: src/getcert.c:3684
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\t自動更新：%s\n"
 
-#: src/getcert.c:3317
+#: src/getcert.c:3791
 #, c-format
 msgid ""
 "None of ID or database directory and and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:3439
+#: src/getcert.c:3866
+msgid "list only the specified CA configuration"
+msgstr ""
+
+#: src/getcert.c:3933
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA「%s」：\n"
 
-#: src/getcert.c:3445
+#: src/getcert.c:3939
 #, c-format
 msgid "\tself-identifies as: %s\n"
 msgstr ""
 
-#: src/getcert.c:3454
+#: src/getcert.c:3948
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-類型：%s\n"
 
-#: src/getcert.c:3456
+#: src/getcert.c:3950
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\thelper-位置：%s\n"
 
-#: src/getcert.c:3461
+#: src/getcert.c:3955
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\t下個序號：%s\n"
 
-#: src/getcert.c:3471
+#: src/getcert.c:3965
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tknown-issuer-names：\n"
 
-#: src/getcert.c:3480
+#: src/getcert.c:3974
 #, c-format
 msgid "\tknown profiles/templates/certtypes:\n"
 msgstr ""
 
-#: src/getcert.c:3543
+#: src/getcert.c:4037
 #, c-format
 msgid "\tdefault profile/template/certtype: %s\n"
 msgstr ""
 
-#: src/getcert.c:3551
+#: src/getcert.c:4045
 #, c-format
 msgid "\tSCEP CA identifier: %s\n"
 msgstr ""
 
-#: src/getcert.c:3564
+#: src/getcert.c:4058
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (MD5): %s\n"
 msgstr ""
 
-#: src/getcert.c:3570
+#: src/getcert.c:4064
 #, c-format
 msgid "\tSCEP CA certificate thumbprint (SHA1): %s\n"
 msgstr ""
 
-#: src/getcert.c:3638
+#: src/getcert.c:4096
+msgid "refresh information about the CA configuration with this name"
+msgstr ""
+
+#: src/getcert.c:4098
+msgid "refresh information about all known CAs"
+msgstr ""
+
+#: src/getcert.c:4144
 #, c-format
 msgid "Neither CA nickname nor -a flag specified.\n"
 msgstr ""
 
-#: src/getcert.c:3664
+#: src/getcert.c:4170
 #, c-format
 msgid "Data for CA '%s' being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3666
+#: src/getcert.c:4172
 #, c-format
 msgid "Data for unnamed CA being refreshed.\n"
 msgstr ""
 
-#: src/getcert.c:3669
+#: src/getcert.c:4175
 #, c-format
 msgid "\terror refreshing CA data\n"
 msgstr ""
 
-#: src/getcert.c:3722 src/getcert.c:3820 src/getcert.c:3941 src/getcert.c:4021
+#: src/getcert.c:4192 src/getcert.c:4283
+msgid "nickname to give to the new CA configuration"
+msgstr ""
+
+#: src/getcert.c:4193
+msgid "helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4233 src/getcert.c:4328 src/getcert.c:4454 src/getcert.c:4541
 #, c-format
 msgid "CA nickname not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3727 src/getcert.c:3946
+#: src/getcert.c:4238 src/getcert.c:4459
 #, c-format
 msgid "CA helper command not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3751 src/getcert.c:3869
+#: src/getcert.c:4262 src/getcert.c:4377
 #, c-format
 msgid "New CA \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:3754 src/getcert.c:3889
+#: src/getcert.c:4265 src/getcert.c:4397
 #, c-format
 msgid "New CA could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:3825
+#: src/getcert.c:4284
+msgid "location of SCEP server"
+msgstr ""
+
+#: src/getcert.c:4285
+msgid "CA identifier"
+msgstr ""
+
+#: src/getcert.c:4286
+msgid "file containing CA's certificate"
+msgstr ""
+
+#: src/getcert.c:4287
+msgid "file containing RA's certificate"
+msgstr ""
+
+#: src/getcert.c:4288
+msgid "file containing certificates in RA's certifying chain"
+msgstr ""
+
+#: src/getcert.c:4333
 #, c-format
 msgid "server URL not specified.\n"
 msgstr ""
 
-#: src/getcert.c:3830
+#: src/getcert.c:4338
 #, c-format
 msgid "HTTPS requires a CA certificate.\n"
 msgstr ""
 
-#: src/getcert.c:3851
+#: src/getcert.c:4359
 #, c-format
 msgid "Error building command line.\n"
 msgstr ""
 
-#: src/getcert.c:3883
+#: src/getcert.c:4391
 #, c-format
 msgid "Error setting CA identifier.\n"
 msgstr ""
 
-#: src/getcert.c:3968
+#: src/getcert.c:4413
+msgid "nickname of the CA configuration"
+msgstr ""
+
+#: src/getcert.c:4414
+msgid "updated helper command to run to communicate with CA"
+msgstr ""
+
+#: src/getcert.c:4481
 #, c-format
 msgid "CA \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:3971
+#: src/getcert.c:4484
 #, c-format
 msgid "CA could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:4049
+#: src/getcert.c:4501
+msgid "nickname of CA configuration to remove"
+msgstr ""
+
+#: src/getcert.c:4569
 #, c-format
 msgid "CA \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:4051
+#: src/getcert.c:4571
 #, c-format
 msgid "CA could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:4088
+#: src/getcert.c:4609
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - 客戶端憑證註冊工具\n"
 
-#: src/getcert.c:4092
+#: src/getcert.c:4613
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "用法：%s 請求 [選項]\n"
 
-#: src/getcert.c:4094 src/getcert.c:4142 src/getcert.c:4189 src/getcert.c:4211
-#: src/getcert.c:4285
+#: src/getcert.c:4615 src/getcert.c:4663 src/getcert.c:4710 src/getcert.c:4732
+#: src/getcert.c:4779 src/getcert.c:4855
 msgid "Required arguments:\n"
 msgstr "請求的參數：\n"
 
-#: src/getcert.c:4095 src/getcert.c:4145 src/getcert.c:4192 src/getcert.c:4214
-#: src/getcert.c:4267 src/getcert.c:4288
+#: src/getcert.c:4616 src/getcert.c:4666 src/getcert.c:4713 src/getcert.c:4735
+#: src/getcert.c:4782 src/getcert.c:4837 src/getcert.c:4858
 msgid "* If using an NSS database for storage:\n"
 msgstr "* 如以 NSS 資料庫作為儲存：\n"
 
-#: src/getcert.c:4096 src/getcert.c:4146 src/getcert.c:4193 src/getcert.c:4215
-#: src/getcert.c:4289
+#: src/getcert.c:4617 src/getcert.c:4667 src/getcert.c:4714 src/getcert.c:4736
+#: src/getcert.c:4783 src/getcert.c:4859
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d 目錄\t金鑰及憑證的 NSS 資料庫\n"
 
-#: src/getcert.c:4097 src/getcert.c:4147 src/getcert.c:4194 src/getcert.c:4216
-#: src/getcert.c:4290
+#: src/getcert.c:4618 src/getcert.c:4668 src/getcert.c:4715 src/getcert.c:4737
+#: src/getcert.c:4784 src/getcert.c:4860
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr "  -n 名稱\t基於 NSS 的儲存裝置的暱稱 (只有與 -d 一起用才有效)\n"
 
-#: src/getcert.c:4098 src/getcert.c:4148 src/getcert.c:4195 src/getcert.c:4217
-#: src/getcert.c:4291
+#: src/getcert.c:4619 src/getcert.c:4669 src/getcert.c:4716 src/getcert.c:4738
+#: src/getcert.c:4785 src/getcert.c:4861
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
-msgstr ""
-"  -t 名稱\t基於 NSS 的儲存裝置的 token 名稱 (可有可無；只有與 -d 一起用才有"
-"效)\n"
+msgstr "  -t 名稱\t基於 NSS 的儲存裝置的 token 名稱 (可有可無；只有與 -d 一起用才有效)\n"
 
-#: src/getcert.c:4099 src/getcert.c:4149 src/getcert.c:4196 src/getcert.c:4218
-#: src/getcert.c:4270 src/getcert.c:4292
+#: src/getcert.c:4620 src/getcert.c:4670 src/getcert.c:4717 src/getcert.c:4739
+#: src/getcert.c:4786 src/getcert.c:4840 src/getcert.c:4862
 msgid "* If using files for storage:\n"
 msgstr "* 如以檔案作為儲存：\n"
 
-#: src/getcert.c:4100 src/getcert.c:4150 src/getcert.c:4197
+#: src/getcert.c:4621 src/getcert.c:4671 src/getcert.c:4718
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k 檔案\t私鑰的 PEM 檔案\n"
 
-#: src/getcert.c:4101 src/getcert.c:4151 src/getcert.c:4198
+#: src/getcert.c:4622 src/getcert.c:4672 src/getcert.c:4719
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f 檔案\t憑證的 PEM 檔案 (只有與 -k 一起用才有效)\n"
 
-#: src/getcert.c:4102
+#: src/getcert.c:4623
 msgid "* If keys are to be encrypted:\n"
 msgstr "* 如金鑰要加密：\n"
 
-#: src/getcert.c:4103 src/getcert.c:4153 src/getcert.c:4222
+#: src/getcert.c:4624 src/getcert.c:4674 src/getcert.c:4743 src/getcert.c:4790
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p 檔案\t儲存加密 PIN 的檔案\n"
 
-#: src/getcert.c:4104 src/getcert.c:4154 src/getcert.c:4223
+#: src/getcert.c:4625 src/getcert.c:4675 src/getcert.c:4744 src/getcert.c:4791
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN 值\n"
 
-#: src/getcert.c:4106 src/getcert.c:4156 src/getcert.c:4200 src/getcert.c:4236
-#: src/getcert.c:4258 src/getcert.c:4295 src/getcert.c:4305 src/getcert.c:4323
-#: src/getcert.c:4338 src/getcert.c:4355 src/getcert.c:4369 src/getcert.c:4387
-#: src/getcert.c:4401
+#: src/getcert.c:4627 src/getcert.c:4677 src/getcert.c:4721 src/getcert.c:4757
+#: src/getcert.c:4804 src/getcert.c:4828 src/getcert.c:4865 src/getcert.c:4875
+#: src/getcert.c:4893 src/getcert.c:4908 src/getcert.c:4925 src/getcert.c:4939
+#: src/getcert.c:4957 src/getcert.c:4971
 msgid "Optional arguments:\n"
 msgstr "可有可無的引數：\n"
 
-#: src/getcert.c:4107 src/getcert.c:4157 src/getcert.c:4237
+#: src/getcert.c:4628 src/getcert.c:4678 src/getcert.c:4758 src/getcert.c:4805
 msgid "* Certificate handling settings:\n"
 msgstr "* 憑證處理設定：\n"
 
-#: src/getcert.c:4108
+#: src/getcert.c:4629
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:4109
+#: src/getcert.c:4630
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4110
+#: src/getcert.c:4631
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:4111 src/getcert.c:4159
+#: src/getcert.c:4632 src/getcert.c:4680
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:4112 src/getcert.c:4160
+#: src/getcert.c:4633 src/getcert.c:4681
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:4114 src/getcert.c:4162
+#: src/getcert.c:4635 src/getcert.c:4683
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:4116 src/getcert.c:4164 src/getcert.c:4242
+#: src/getcert.c:4637 src/getcert.c:4685 src/getcert.c:4763 src/getcert.c:4810
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:4117
+#: src/getcert.c:4638
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4118 src/getcert.c:4226
+#: src/getcert.c:4639 src/getcert.c:4747 src/getcert.c:4794
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:4119 src/getcert.c:4227
+#: src/getcert.c:4640 src/getcert.c:4748 src/getcert.c:4795
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4120 src/getcert.c:4167 src/getcert.c:4228
+#: src/getcert.c:4641 src/getcert.c:4688 src/getcert.c:4749 src/getcert.c:4796
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:4121 src/getcert.c:4229
+#: src/getcert.c:4642 src/getcert.c:4750 src/getcert.c:4797
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4122 src/getcert.c:4230
+#: src/getcert.c:4643 src/getcert.c:4751 src/getcert.c:4798
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4123 src/getcert.c:4231
+#: src/getcert.c:4644 src/getcert.c:4752 src/getcert.c:4799
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4124 src/getcert.c:4232
+#: src/getcert.c:4645 src/getcert.c:4753 src/getcert.c:4800
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4125 src/getcert.c:4172 src/getcert.c:4233
+#: src/getcert.c:4646 src/getcert.c:4693 src/getcert.c:4754 src/getcert.c:4801
 msgid "  -l FILE\tfile which holds an optional challenge password\n"
 msgstr ""
 
-#: src/getcert.c:4126 src/getcert.c:4173 src/getcert.c:4234
+#: src/getcert.c:4647 src/getcert.c:4694 src/getcert.c:4755 src/getcert.c:4802
 msgid "  -L PASSWORD\tan optional challenge password value\n"
 msgstr ""
 
-#: src/getcert.c:4127 src/getcert.c:4174 src/getcert.c:4201 src/getcert.c:4243
-#: src/getcert.c:4272 src/getcert.c:4296 src/getcert.c:4313 src/getcert.c:4328
-#: src/getcert.c:4344 src/getcert.c:4359 src/getcert.c:4377 src/getcert.c:4391
-#: src/getcert.c:4404
+#: src/getcert.c:4648 src/getcert.c:4695 src/getcert.c:4722 src/getcert.c:4764
+#: src/getcert.c:4813 src/getcert.c:4842 src/getcert.c:4866 src/getcert.c:4883
+#: src/getcert.c:4898 src/getcert.c:4914 src/getcert.c:4929 src/getcert.c:4947
+#: src/getcert.c:4961 src/getcert.c:4974
 msgid "* Bus options:\n"
 msgstr "* 匯流排選項：\n"
 
-#: src/getcert.c:4128 src/getcert.c:4175 src/getcert.c:4202 src/getcert.c:4244
-#: src/getcert.c:4297
+#: src/getcert.c:4649 src/getcert.c:4696 src/getcert.c:4723 src/getcert.c:4765
+#: src/getcert.c:4814 src/getcert.c:4867
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4129 src/getcert.c:4176 src/getcert.c:4203 src/getcert.c:4245
-#: src/getcert.c:4298
+#: src/getcert.c:4650 src/getcert.c:4697 src/getcert.c:4724 src/getcert.c:4766
+#: src/getcert.c:4815 src/getcert.c:4868
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4130 src/getcert.c:4177 src/getcert.c:4204 src/getcert.c:4246
-#: src/getcert.c:4275 src/getcert.c:4316 src/getcert.c:4331 src/getcert.c:4347
-#: src/getcert.c:4362 src/getcert.c:4380 src/getcert.c:4394 src/getcert.c:4407
+#: src/getcert.c:4651 src/getcert.c:4698 src/getcert.c:4725 src/getcert.c:4767
+#: src/getcert.c:4816 src/getcert.c:4845 src/getcert.c:4886 src/getcert.c:4901
+#: src/getcert.c:4917 src/getcert.c:4932 src/getcert.c:4950 src/getcert.c:4964
+#: src/getcert.c:4977
 msgid "* Other options:\n"
 msgstr "* 其他選項：\n"
 
-#: src/getcert.c:4131 src/getcert.c:4178 src/getcert.c:4247
+#: src/getcert.c:4652 src/getcert.c:4699 src/getcert.c:4768 src/getcert.c:4817
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4132 src/getcert.c:4179 src/getcert.c:4248
+#: src/getcert.c:4653 src/getcert.c:4700 src/getcert.c:4769 src/getcert.c:4818
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:4133 src/getcert.c:4180 src/getcert.c:4249
+#: src/getcert.c:4654 src/getcert.c:4701 src/getcert.c:4770 src/getcert.c:4819
 msgid "  -F\tfile in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4134 src/getcert.c:4181 src/getcert.c:4250
+#: src/getcert.c:4655 src/getcert.c:4702 src/getcert.c:4771 src/getcert.c:4820
 msgid "  -a\tNSS database in which to store the CA's certificates\n"
 msgstr ""
 
-#: src/getcert.c:4135 src/getcert.c:4182 src/getcert.c:4251
+#: src/getcert.c:4656 src/getcert.c:4703 src/getcert.c:4772 src/getcert.c:4821
 msgid "  -w\ttry to wait for the certificate to be issued\n"
 msgstr ""
 
-#: src/getcert.c:4136 src/getcert.c:4183 src/getcert.c:4205 src/getcert.c:4252
-#: src/getcert.c:4276 src/getcert.c:4299 src/getcert.c:4317 src/getcert.c:4332
-#: src/getcert.c:4348 src/getcert.c:4363 src/getcert.c:4381 src/getcert.c:4395
-#: src/getcert.c:4408
+#: src/getcert.c:4657 src/getcert.c:4704 src/getcert.c:4726 src/getcert.c:4773
+#: src/getcert.c:4822 src/getcert.c:4846 src/getcert.c:4869 src/getcert.c:4887
+#: src/getcert.c:4902 src/getcert.c:4918 src/getcert.c:4933 src/getcert.c:4951
+#: src/getcert.c:4965 src/getcert.c:4978
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\t報告錯誤的所有詳情\n"
 
-#: src/getcert.c:4140
+#: src/getcert.c:4661
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "用法：%s start-tracking [選項]\n"
 
-#: src/getcert.c:4143
+#: src/getcert.c:4664
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:4144
+#: src/getcert.c:4665
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4152 src/getcert.c:4221
+#: src/getcert.c:4673 src/getcert.c:4742 src/getcert.c:4789
 msgid "* If keys are encrypted:\n"
 msgstr "* 如金鑰已加密：\n"
 
-#: src/getcert.c:4158
+#: src/getcert.c:4679
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4165
+#: src/getcert.c:4686
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:4166
+#: src/getcert.c:4687
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:4168
+#: src/getcert.c:4689
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:4169
+#: src/getcert.c:4690
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:4170
+#: src/getcert.c:4691
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:4171
+#: src/getcert.c:4692
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:4187
+#: src/getcert.c:4708
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "用法：%s stop-tracking [選項]\n"
 
-#: src/getcert.c:4190 src/getcert.c:4212 src/getcert.c:4286
+#: src/getcert.c:4711 src/getcert.c:4733 src/getcert.c:4780 src/getcert.c:4856
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:4191 src/getcert.c:4213 src/getcert.c:4266 src/getcert.c:4287
-#: src/getcert.c:4307
+#: src/getcert.c:4712 src/getcert.c:4734 src/getcert.c:4781 src/getcert.c:4836
+#: src/getcert.c:4857 src/getcert.c:4877
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4209
+#: src/getcert.c:4730
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "用法：%s resubmit [選項]\n"
 
-#: src/getcert.c:4219 src/getcert.c:4293
+#: src/getcert.c:4740 src/getcert.c:4787 src/getcert.c:4863
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f 檔案\t憑證的 PEM 檔案\n"
 
-#: src/getcert.c:4225
+#: src/getcert.c:4746 src/getcert.c:4793
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:4238
+#: src/getcert.c:4759 src/getcert.c:4806
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:4240
+#: src/getcert.c:4761 src/getcert.c:4808
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:4256
+#: src/getcert.c:4777
+#, c-format
+msgid "Usage: %s rekey [options]\n"
+msgstr ""
+
+#: src/getcert.c:4811
+msgid "  -G TYPE\ttype of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4812
+msgid "  -g SIZE\tsize of new key to be generated\n"
+msgstr ""
+
+#: src/getcert.c:4826
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "用法：%s list [選項]\n"
 
-#: src/getcert.c:4259 src/getcert.c:4282 src/getcert.c:4325 src/getcert.c:4340
-#: src/getcert.c:4356 src/getcert.c:4370 src/getcert.c:4388 src/getcert.c:4402
+#: src/getcert.c:4829 src/getcert.c:4852 src/getcert.c:4895 src/getcert.c:4910
+#: src/getcert.c:4926 src/getcert.c:4940 src/getcert.c:4958 src/getcert.c:4972
 msgid "* General options:\n"
 msgstr "* 一般選項：\n"
 
-#: src/getcert.c:4261
+#: src/getcert.c:4831
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA\t只列出與此 CA 有關的請求與憑證\n"
 
-#: src/getcert.c:4263
+#: src/getcert.c:4833
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4264
+#: src/getcert.c:4834
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:4265
+#: src/getcert.c:4835
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4268
+#: src/getcert.c:4838
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr "  -d 目錄\t只列出使用此 NSS 資料庫的請求及憑證\n"
 
-#: src/getcert.c:4269
+#: src/getcert.c:4839
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr "  -n 名稱\t只列出使用此暱稱的請求及憑證\n"
 
-#: src/getcert.c:4271
+#: src/getcert.c:4841
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr "  -f 檔案\t只列出儲存於此 PEM 檔案的請求及憑證\n"
 
-#: src/getcert.c:4273 src/getcert.c:4314 src/getcert.c:4329 src/getcert.c:4345
-#: src/getcert.c:4360 src/getcert.c:4378 src/getcert.c:4392 src/getcert.c:4405
+#: src/getcert.c:4843 src/getcert.c:4884 src/getcert.c:4899 src/getcert.c:4915
+#: src/getcert.c:4930 src/getcert.c:4948 src/getcert.c:4962 src/getcert.c:4975
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:4274 src/getcert.c:4315 src/getcert.c:4330 src/getcert.c:4346
-#: src/getcert.c:4361 src/getcert.c:4379 src/getcert.c:4393 src/getcert.c:4406
+#: src/getcert.c:4844 src/getcert.c:4885 src/getcert.c:4900 src/getcert.c:4916
+#: src/getcert.c:4931 src/getcert.c:4949 src/getcert.c:4963 src/getcert.c:4976
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:4280
+#: src/getcert.c:4850
 #, c-format
 msgid "Usage: %s refresh [options]\n"
 msgstr ""
 
-#: src/getcert.c:4283
+#: src/getcert.c:4853
 msgid "  -a\trefresh information about all outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:4303
+#: src/getcert.c:4873
 #, c-format
 msgid "Usage: %s status [options]\n"
 msgstr ""
 
-#: src/getcert.c:4306
+#: src/getcert.c:4876
 msgid "* Selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:4308
+#: src/getcert.c:4878
 msgid "* When using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4309
+#: src/getcert.c:4879
 msgid "  -d DIR\treturn status for the request in this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:4310
+#: src/getcert.c:4880
 msgid "  -n NAME\treturn status for cert which uses this nickname\n"
 msgstr ""
 
-#: src/getcert.c:4311
+#: src/getcert.c:4881
 msgid "* When using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:4312
+#: src/getcert.c:4882
 msgid "  -f FILE\treturn status for cert stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:4321
+#: src/getcert.c:4891
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "用法：%s list-cas [選項]\n"
 
-#: src/getcert.c:4326
+#: src/getcert.c:4896
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4336
+#: src/getcert.c:4906
 #, c-format
 msgid "Usage: %s refresh-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4341
+#: src/getcert.c:4911
 msgid "  -c CA\trefresh information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:4342
+#: src/getcert.c:4912
 msgid "  -a\trefresh information about all known CAs\n"
 msgstr ""
 
-#: src/getcert.c:4353
+#: src/getcert.c:4923
 #, c-format
 msgid "Usage: %s add-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4357 src/getcert.c:4371
+#: src/getcert.c:4927 src/getcert.c:4941
 msgid "  -c CA\t\tnickname to give to the new CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4358
+#: src/getcert.c:4928
 msgid "  -e CMD\thelper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4367
+#: src/getcert.c:4937
 #, c-format
 msgid "Usage: %s add-scep-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4372
+#: src/getcert.c:4942
 msgid "  -u URL\tlocation of SCEP server\n"
 msgstr ""
 
-#: src/getcert.c:4373
+#: src/getcert.c:4943
 msgid "  -i ID\t\tCA identifier\n"
 msgstr ""
 
-#: src/getcert.c:4374
+#: src/getcert.c:4944
 msgid "  -R FILE\tfile containing CA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4375
+#: src/getcert.c:4945
 msgid "  -r FILE\tfile containing RA's certificate\n"
 msgstr ""
 
-#: src/getcert.c:4376
+#: src/getcert.c:4946
 msgid "  -I FILE\tfile containing certificates in RA's certifying chain\n"
 msgstr ""
 
-#: src/getcert.c:4385
+#: src/getcert.c:4955
 #, c-format
 msgid "Usage: %s modify-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4389
+#: src/getcert.c:4959
 msgid "  -c CA\t\tnickname of the CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4390
+#: src/getcert.c:4960
 msgid "  -e CMD\tupdated helper command to run to communicate with CA\n"
 msgstr ""
 
-#: src/getcert.c:4399
+#: src/getcert.c:4969
 #, c-format
 msgid "Usage: %s remove-ca [options]\n"
 msgstr ""
 
-#: src/getcert.c:4403
+#: src/getcert.c:4973
 msgid "  -c CA\tnickname of CA configuration to remove\n"
 msgstr ""
 
-#: src/getcert.c:4418
+#: src/getcert.c:4988
 #, c-format
 msgid "Usage: %s command [options]\n"
 msgstr ""
 
-#: src/getcert.c:4420
+#: src/getcert.c:4990
 msgid "request a new certificate from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4422
+#: src/getcert.c:4992
 msgid "begin monitoring an already-issued certificate\n"
 msgstr ""
 
-#: src/getcert.c:4424
+#: src/getcert.c:4994
 msgid "stop monitoring a certificate\n"
 msgstr ""
 
-#: src/getcert.c:4426
+#: src/getcert.c:4996
 msgid "resubmit an in-progress enrollment request, or start a new one\n"
 msgstr ""
 
-#: src/getcert.c:4428
+#: src/getcert.c:4998
+msgid "generate a new private key and replace a certificate\n"
+msgstr ""
+
+#: src/getcert.c:5000
 msgid "check on the status of an in-progress enrollment request\n"
 msgstr ""
 
-#: src/getcert.c:4430
+#: src/getcert.c:5002
 msgid "list certificates being monitored and requested\n"
 msgstr ""
 
-#: src/getcert.c:4432
+#: src/getcert.c:5004
 msgid "check the status of a certificate being monitored or requested\n"
 msgstr ""
 
-#: src/getcert.c:4435
+#: src/getcert.c:5007
 msgid "add a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4437
+#: src/getcert.c:5009
 msgid "add an SCEP CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4440
+#: src/getcert.c:5012
 msgid "list known CA configurations\n"
 msgstr ""
 
-#: src/getcert.c:4443
+#: src/getcert.c:5015
 msgid "modify a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4446
+#: src/getcert.c:5018
 msgid "refresh cache of all information obtained from a CA\n"
 msgstr ""
 
-#: src/getcert.c:4449
+#: src/getcert.c:5021
 msgid "remove a CA configuration\n"
 msgstr ""
 
-#: src/getcert.c:4502
+#: src/getcert.c:5080
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s：指令無法辨識\n"
 
-#: src/ipa.c:158
+#: src/ipa.c:140
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:163
+#: src/ipa.c:145
 #, c-format
 msgid "Unable to contact an IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:247 src/ipa.c:508
+#: src/ipa.c:229 src/ipa.c:503
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
 
-#: src/ipa.c:372
+#: src/ipa.c:355
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:620
+#: src/ipa.c:623
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "選項 -t 不能與 -K 一起使用。\n"
 
-#: src/ipa.c:628
+#: src/ipa.c:632
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "選項 -k 不能與 -K 一起使用。\n"
 
-#: src/ipa.c:636
+#: src/ipa.c:641
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "選項 -K 不能與 -k 或 -t 一起使用。\n"
 
-#: src/ipa.c:717
+#: src/ipa.c:723
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:775
+#: src/ipa.c:786
 #, c-format
 msgid "No IPA domain configured, and none specified.\n"
 msgstr ""
 
-#: src/ipa.c:789
+#: src/ipa.c:800
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:793
+#: src/ipa.c:804
 #, c-format
-msgid ""
-"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:800
+#: src/ipa.c:811
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:804
+#: src/ipa.c:815
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/main.c:137
+#: src/main.c:74
+msgid "use session bus"
+msgstr ""
+
+#: src/main.c:75
+msgid "use system bus"
+msgstr ""
+
+#: src/main.c:76
+msgid "start a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:77
+msgid "only use a dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "specify the dedicated listening socket"
+msgstr ""
+
+#: src/main.c:78
+msgid "PATHNAME"
+msgstr ""
+
+#: src/main.c:79
+msgid "don't become a daemon"
+msgstr ""
+
+#: src/main.c:80
+msgid "do become a daemon"
+msgstr ""
+
+#: src/main.c:81
+msgid "bus-activated, idle timeout"
+msgstr ""
+
+#: src/main.c:81
+msgid "SECONDS"
+msgstr ""
+
+#: src/main.c:82
+msgid "don't use an idle timeout"
+msgstr ""
+
+#: src/main.c:83
+msgid "set debugging level (implies -n)"
+msgstr ""
+
+#: src/main.c:83
+msgid "NUMBER"
+msgstr ""
+
+#: src/main.c:84
+msgid "start COMMAND and exit when it does"
+msgstr ""
+
+#: src/main.c:85
+msgid "write service PID to file"
+msgstr ""
+
+#: src/main.c:86
+msgid "force NSS into FIPS mode"
+msgstr ""
+
+#: src/main.c:171
 #, c-format
 msgid "Usage: %s [-s|-S] [-n|-f] [-d LEVEL] [-p FILE] [-F]\n"
 msgstr ""
 
-#: src/main.c:141
+#: src/main.c:174
 msgid "\t-s         use session bus\n"
 msgstr ""
 
-#: src/main.c:142
+#: src/main.c:175
 msgid "\t-S         use system bus\n"
 msgstr "\t-S         使用系統匯流排\n"
 
-#: src/main.c:143
+#: src/main.c:176
 msgid "\t-l         start a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:144
+#: src/main.c:177
 msgid "\t-L         only use a dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:145
+#: src/main.c:178
 msgid "\t-P PATH    specify the dedicated listening socket\n"
 msgstr ""
 
-#: src/main.c:146
+#: src/main.c:179
 msgid "\t-n         don't become a daemon\n"
 msgstr ""
 
-#: src/main.c:147
+#: src/main.c:180
 msgid "\t-f         do become a daemon\n"
 msgstr ""
 
-#: src/main.c:148
+#: src/main.c:181
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
 msgstr ""
 
-#: src/main.c:149
+#: src/main.c:182
 msgid "\t-B         don't use an idle timeout\n"
 msgstr ""
 
-#: src/main.c:150
+#: src/main.c:183
 msgid "\t-d LEVEL   set debugging level (implies -n)\n"
 msgstr "\t-d 等級   設定除錯等級 (等於同時指定 -n)\n"
 
-#: src/main.c:151
+#: src/main.c:184
 msgid "\t-c COMMAND start COMMAND and exit when it does\n"
 msgstr ""
 
-#: src/main.c:152
+#: src/main.c:185
 msgid "\t-p FILE    write service PID to file\n"
 msgstr ""
 
-#: src/main.c:153
+#: src/main.c:186
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1898 src/tdbush.c:2301
+#: src/tdbush.c:119 src/tdbush.c:1937 src/tdbush.c:2344
 msgid "An internal error has occurred."
 msgstr "發生內部錯誤。"
 
@@ -1380,115 +1789,116 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "已有暱稱為 \"%s\" 的 CA。"
 
-#: src/tdbush.c:437
+#: src/tdbush.c:439
 msgid "Certificate storage type not specified."
 msgstr "未指定憑證儲存類型。"
 
-#: src/tdbush.c:450
+#: src/tdbush.c:452
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "不支援憑證儲存類型 \"%s\"。"
 
-#: src/tdbush.c:487 src/tdbush.c:520 src/tdbush.c:579 src/tdbush.c:764
-#: src/tdbush.c:823 src/tdbush.c:926 src/tdbush.c:971 src/tdbush.c:1026
-#: src/tdbush.c:1071 src/tdbush.c:1126 src/tdbush.c:1171 src/tdbush.c:1546
-#: src/tdbush.c:3114 src/tdbush.c:3258
+#: src/tdbush.c:489 src/tdbush.c:522 src/tdbush.c:581 src/tdbush.c:766
+#: src/tdbush.c:825 src/tdbush.c:928 src/tdbush.c:973 src/tdbush.c:1028
+#: src/tdbush.c:1073 src/tdbush.c:1128 src/tdbush.c:1173 src/tdbush.c:1585
+#: src/tdbush.c:3185 src/tdbush.c:3329
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "\"%s\" 位置須為絕對路徑。"
 
-#: src/tdbush.c:514 src/tdbush.c:573 src/tdbush.c:642
+#: src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:644
 msgid "Certificate storage location not specified."
 msgstr "未指定憑證儲存位置。"
 
-#: src/tdbush.c:532 src/tdbush.c:776 src/tdbush.c:983 src/tdbush.c:1083
-#: src/tdbush.c:1183
+#: src/tdbush.c:534 src/tdbush.c:778 src/tdbush.c:985 src/tdbush.c:1085
+#: src/tdbush.c:1185
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:540 src/tdbush.c:784 src/tdbush.c:991 src/tdbush.c:1091
-#: src/tdbush.c:1191
+#: src/tdbush.c:542 src/tdbush.c:786 src/tdbush.c:993 src/tdbush.c:1093
+#: src/tdbush.c:1193
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "\"%s\" 的上層須為有效目錄。"
 
-#: src/tdbush.c:551 src/tdbush.c:795 src/tdbush.c:1002 src/tdbush.c:1102
-#: src/tdbush.c:1202
+#: src/tdbush.c:553 src/tdbush.c:797 src/tdbush.c:1004 src/tdbush.c:1104
+#: src/tdbush.c:1204
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "\"%s\" 位置須為檔案。"
 
-#: src/tdbush.c:591 src/tdbush.c:938 src/tdbush.c:1038 src/tdbush.c:1138
+#: src/tdbush.c:593 src/tdbush.c:940 src/tdbush.c:1040 src/tdbush.c:1140
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:599 src/tdbush.c:832 src/tdbush.c:946 src/tdbush.c:1046
-#: src/tdbush.c:1146
+#: src/tdbush.c:601 src/tdbush.c:834 src/tdbush.c:948 src/tdbush.c:1048
+#: src/tdbush.c:1148
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "\"%s\" 位置須為目錄。"
 
-#: src/tdbush.c:620
+#: src/tdbush.c:622
 msgid "Certificate nickname not specified."
 msgstr "未指定憑證暱稱。"
 
-#: src/tdbush.c:663 src/tdbush.c:3005
+#: src/tdbush.c:665 src/tdbush.c:3048
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "已有暱稱為 \"%s\" 的請求。"
 
-#: src/tdbush.c:699
+#: src/tdbush.c:701
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
+""
 msgstr ""
 
-#: src/tdbush.c:732
+#: src/tdbush.c:734
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "不支援金鑰儲存類型 \"%s\"。"
 
-#: src/tdbush.c:758 src/tdbush.c:817
+#: src/tdbush.c:760 src/tdbush.c:819
 msgid "Key storage location not specified."
 msgstr "未指定金鑰儲存位置。"
 
-#: src/tdbush.c:851
+#: src/tdbush.c:853
 msgid "Key nickname not specified."
 msgstr "未指定金鑰暱稱。"
 
-#: src/tdbush.c:907
+#: src/tdbush.c:909
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1278
+#: src/tdbush.c:1313
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1361
+#: src/tdbush.c:1400
 msgid "No such CA."
 msgstr "沒有這樣的 CA。"
 
-#: src/tdbush.c:3023
+#: src/tdbush.c:3066
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "未知的憑證授權機構「%s」。"
 
-#: src/tdbush.c:3394
+#: src/tdbush.c:3465
 msgid "Unrecognized parameter or wrong value type."
 msgstr "無法辨識的參數或錯誤的值類型。"
 
-#: src/tdbush.c:4888
+#: src/tdbush.c:5009
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4942
+#: src/tdbush.c:5063
 msgid "Unrecognized property name."
 msgstr ""