From 4eec13ede29c137c90f3881ad1cb0332bf894386 Mon Sep 17 00:00:00 2001
From: Nalin Dahyabhai <nalin@dahyabhai.net>
Date: Jun 05 2014 16:23:03 +0000
Subject: tag 0.74.93


---

diff --git a/certmonger.spec b/certmonger.spec
index 847c6d6..7a752ff 100644
--- a/certmonger.spec
+++ b/certmonger.spec
@@ -19,7 +19,7 @@
 %endif
 
 Name:		certmonger
-Version:	0.74.92
+Version:	0.74.93
 Release:	1%{?dist}
 Summary:	Certificate status monitor and PKI enrollment client
 
@@ -205,6 +205,11 @@ exit 0
 %endif
 
 %changelog
+* Tue Jun  5 2014 Nalin Dahyabhai <nalin@redhat.com> 0.74.93-1
+- add some self-tests
+- simplify the internal submit-to-CA logic
+- fixes for more problems found through static analysis
+
 * Tue Jun  3 2014 Nalin Dahyabhai <nalin@redhat.com> 0.74.92-1
 - retrieve CA information from CAs, if the helpers can do so, and
   add a command to explicitly refresh that data: "getcert refresh-ca"
diff --git a/configure.ac b/configure.ac
index 0694626..34235e4 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,4 +1,4 @@
-AC_INIT(certmonger,0.74.92)
+AC_INIT(certmonger,0.74.93)
 AM_INIT_AUTOMAKE([foreign subdir-objects])
 AC_CONFIG_MACRO_DIR(m4)
 AM_MAINTAINER_MODE([enable])
diff --git a/po/af.po b/po/af.po
index 6943a71..2a3f15f 100644
--- a/po/af.po
+++ b/po/af.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Afrikaans (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Afrikaans (http://www.transifex.com/projects/p/certmonger/"
 "language/af/)\n"
 "Language: af\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/af_ZA.po b/po/af_ZA.po
index ead2ee9..4a13cdf 100644
--- a/po/af_ZA.po
+++ b/po/af_ZA.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Afrikaans (South Africa) (http://www.transifex.com/projects/p/"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/aln.po b/po/aln.po
index e7f70ca..4e9e626 100644
--- a/po/aln.po
+++ b/po/aln.po
@@ -1,28 +1,29 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Albanian Gheg (http://www.transifex.com/projects/p/certmonger/language/aln/)\n"
+"Language-Team: Albanian Gheg (http://www.transifex.com/projects/p/certmonger/"
+"language/aln/)\n"
+"Language: aln\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: aln\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/am.po b/po/am.po
index ea87543..cb04f74 100644
--- a/po/am.po
+++ b/po/am.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Amharic (http://www.transifex.com/projects/p/fedora/language/"
-"am/)\n"
+"Language-Team: Amharic (http://www.transifex.com/projects/p/certmonger/"
+"language/am/)\n"
 "Language: am\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ar.po b/po/ar.po
index e65de00..db3c2dd 100644
--- a/po/ar.po
+++ b/po/ar.po
@@ -7,11 +7,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Arabic (http://www.transifex.com/projects/p/fedora/language/"
-"ar/)\n"
+"Language-Team: Arabic (http://www.transifex.com/projects/p/certmonger/"
+"language/ar/)\n"
 "Language: ar\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=6; plural=n==0 ? 0 : n==1 ? 1 : n==2 ? 2 : n%100>=3 "
 "&& n%100<=10 ? 3 : n%100>=11 && n%100<=99 ? 4 : 5;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/as.po b/po/as.po
index a8323cd..52c01ba 100644
--- a/po/as.po
+++ b/po/as.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Assamese (http://www.transifex.com/projects/p/fedora/language/"
-"as/)\n"
+"Language-Team: Assamese (http://www.transifex.com/projects/p/certmonger/"
+"language/as/)\n"
 "Language: as\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ast.po b/po/ast.po
index b6343ab..a24be22 100644
--- a/po/ast.po
+++ b/po/ast.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Asturian (http://www.transifex.com/projects/p/fedora/language/"
-"ast/)\n"
+"Language-Team: Asturian (http://www.transifex.com/projects/p/certmonger/"
+"language/ast/)\n"
 "Language: ast\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/az.po b/po/az.po
index a13a385..23ffc02 100644
--- a/po/az.po
+++ b/po/az.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Azerbaijani (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Azerbaijani (http://www.transifex.com/projects/p/certmonger/"
 "language/az/)\n"
 "Language: az\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/bal.po b/po/bal.po
index c48d044..47929be 100644
--- a/po/bal.po
+++ b/po/bal.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Balochi (http://www.transifex.com/projects/p/fedora/language/"
-"bal/)\n"
+"Language-Team: Balochi (http://www.transifex.com/projects/p/certmonger/"
+"language/bal/)\n"
 "Language: bal\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/be.po b/po/be.po
index 5c6277a..8b40d44 100644
--- a/po/be.po
+++ b/po/be.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Belarusian (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Belarusian (http://www.transifex.com/projects/p/certmonger/"
 "language/be/)\n"
 "Language: be\n"
 "MIME-Version: 1.0\n"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=4; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/bg.po b/po/bg.po
index 3c077e5..f3feb34 100644
--- a/po/bg.po
+++ b/po/bg.po
@@ -9,10 +9,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Bulgarian (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Bulgarian (http://www.transifex.com/projects/p/certmonger/"
 "language/bg/)\n"
 "Language: bg\n"
 "MIME-Version: 1.0\n"
@@ -20,12 +20,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Не може да се определи името на CA хоста.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Не може да се прочете заявката за подписване.\n"
@@ -37,9 +37,9 @@ msgstr "Грешка при подготовка за XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Грешка при анализ отговора от сървъра.\n"
@@ -70,9 +70,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Няма зададен profile/template (-T), а няма и такъв по подразбиране.\n"
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Грешка при подготовка за XMLRPC.\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -138,7 +138,7 @@ msgstr "Недостиг на памет.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Грешка при свързване към DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Моля, проверете дали услугата за съобщения (D-Bus) работи.\n"
@@ -173,78 +173,78 @@ msgstr "Получен е отговор за грешка от локална %
 msgid "No response received from %s service.\n"
 msgstr "Не е получен отговор от услугата %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Грешка при инициализиране на Kerberos библиотеката: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Неразпознат keyUsage \"%s\".\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Не може да се пресметне OID \"%s\".\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Грешка при разбора на главното име на Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Грешка при сглобяването на главното име на Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: опцията изисква аргумент -- '%c'\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: грешна опция -- '%c'⏎\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 "Грешка: неизползван допълнителен аргумент \"%s\".⏎\n"
 "\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Грешка: бяха предоставени неизползвани допълнителни аргументи.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 "Местоположение на базата данни или псевдоним е определено без другото.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Определени са и директория на базата данни, и файл със сертификата.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -252,13 +252,13 @@ msgstr ""
 "Никое от директория на базата данни и псевдоним, или файл със сертификат не "
 "е определено.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "Не може и ключът, и сертификатът, да бъдат записани в един и същ файл.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -267,39 +267,39 @@ msgstr ""
 "Задният слой на IPA изисква използването на -K опция (главно име), когато -N "
 "опцията (име на обекта) се използва.⏎\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Не е намерен CA с име \"%s\".\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Грешка при задаване аргументите на заявката.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Добавена е нова заявка за подписване \"%s\".\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Новата заявка за подписване не можа да бъде добавена.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Беше добавена нова проследявана заявка \"%s\".\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Не може да бъде добавена нова проследявана заявка.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -308,320 +308,370 @@ msgstr ""
 "Никое от ID, или директория на базата данни и псевдоним, или файл със "
 "сертификат не е определено.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Беше променена заявката \"%s\".\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Не можа да бъде променена заявката \"%s\".\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Не е намерено искане за този псевдоним.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Не беше намерена заявка, отговаряща на аргументите.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Беше премахната заявката \"%s\".\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Не можа да бъде премахната заявката \"%s\".\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Грешка при промяна \"%s\".\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Повторно изпращане на \"%s\" към \"%s\".\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Повторно изпращане на \"%s\".\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Грешка при опит за изпращане на \"%s\" към \"%s\".\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Грешка при опит за изпращане на \"%s\".\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Брой на проследяваните сертификати и заявки: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID на заявка '%s':\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "        състояние: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "        CA-грешка: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "        останал: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "        хранилище на ключови двойки: тип=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "НИЩО"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",местоположение='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",псевдоним='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",пин='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",пинфайл='%s'"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "        сертификат: тип=%s,местоположение='%s'"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "        CA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "        издател: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "        обект: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "        изтича на: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "непознат"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\temail: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "»главно име: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tkey usage: %s\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tpre-save команда: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tpost-save команда: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttrack: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renew: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-type: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\thelper-location: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "»следващ-сериен-номер: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "        познати-имена-на-издатели:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - инструмент за записване на клиентски сертификат\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Употреба: %s request [опции]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Необходими аргументи:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Ако за хранилище се използва NSS база данни:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR         NSS база данни за ключ и сертификат\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAME        псевдоним за NSS-базирано хранилище (валидно само с -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAME        незадължително token name за NSS-базирано хранилище "
 "(валидно само с -d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Ако за хранилище се използват файлове:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE        PEM файл за частен ключ\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE        PEM файл за сертификат (валидно само с -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Ако ключовете трябва да бъдат криптирани:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE        файл, съдържащ ПИН за криптиране\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN        стойност на ПИН\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Незадължителни аргументи:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Настройки на обработката на сертификата:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME        псевдоним, който да бъде присвоен към заявката\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g SIZE»големина на ключ, който да бъде генериран ако няма вече създаден "
 "такъв⏎\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r             опит за подновяване на сертификата, когато изтичането му "
 "наближава (по подразбиране)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R             не опитвай подновяване на сертификата, когато изтичането му "
 "наближава\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA          използвай зададения CA вместо този по подразбиране\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -629,287 +679,305 @@ msgstr ""
 "  -T PROFILE\tиска CA да обработи заявката, използвайки профил или шаблон с "
 "това име\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Параметри за подписване на заявките:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAME        задава заявеното име на обекта (по подразбиране: CN=<име на "
 "хост>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\tзадава искан разширен OID ключ за употреба\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\tзадава исканата key usage стойност\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME\tзадава искано principal име\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAME\tзадава искано DNS име\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL     задава заявения имейл адрес\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Опции на шината:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 "  -S                свържи се с услугата certmonger през системната шина\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 "  -s                свържи се с услугата certmonger през сесийната шина\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Други опции:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tкоманда за изпълнение преди записа на сертификата\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tкоманда за изпълнение след записа на сертификата\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v        показва всички подробности за грешките\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Употреба: %s start-tracking [опции]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Ако се променя съществуваща заявка:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME        псевдоним от съществуваща проследявана заявка\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Ако ключовете са криптирани:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 "  -I NAME        псевдоним, който да бъде даден към проследяваната заявка\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Параметри за заявката за подписване по време на подновяването:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\tзамества искания разширен OID ключ за употреба\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME\tзамества исканото principal име\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\tзамества исканото DNS име\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "-E EMAIL»смяна на искания email адрес\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Употреба: %s stop-tracking [опции]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* По идентификатор на заявката:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME        псевдоним за проследяваната заявка\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Употреба: %s resubmit [опции]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE        PEM файл за сертификата\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Нови стойности на параметри за подписваната заявка:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 "  -I NAME        нов псевдоним, който да бъде даден към проследяваната "
 "заявка\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA                използвай зададения CA вместо текущия\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Употреба: %s list [опции]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Основни опции:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA          само показва заявките и сертификатите, асоциирани с това "
 "CA\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r              само показва информация за неуредените заявки\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 "  -t              само показва информация за проследяваните сертификати\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Ако изберете специфична заявка:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR        само показва списък на заявките и сертификатите, използващи "
 "тази NSS база данни\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAME       само показва списък на заявките и сертификатите, използващи "
 "този псевдоним\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FILE       само показва списък на заявките и сертификатите, записани в "
 "този PEM файл\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S          свържи се с услугата certmonger през системната шина\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s          свържи се с услугата certmonger през сесийната шина\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Употреба: %s list-cas [опции]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA          само показва информация за CA с това име\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Употреба: %s request [опции]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "  -c CA          само показва информация за CA с това име\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: непозната команда\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "Опцията -t не може да бъде използвана заедно с -K опция.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "Опциятата -к не може да бъде използвана заедно с -К опция.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "Опцията -К не може да бъде използвана с -k или -t опции.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Не може да бъде установено главно име за заявката за подписване.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Не мога да определя местоположението на XMLRPC сървъра на това CA.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Не мога да определя местоположението на XMLRPC сървъра на това CA.\n"
+msgstr ""
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "Не мога да определя местоположението на XMLRPC сървъра на това CA.\n"
+msgstr ""
 
 #: src/main.c:120
 #, c-format
@@ -952,7 +1020,7 @@ msgstr "\t-p FILE    запиши PID на услугата във файл FILE
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Възникна вътрешна грешка."
 
@@ -965,121 +1033,126 @@ msgstr "Не бяха намерени такива записи.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Вече има CA с псевдонима \"%s\"."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Не е определен тип на хранилището на сертификати."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Не се поддържа хранилище на сертификати от тип \"%s\"."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Местоположението \"%s\" трябва да е абсолютен път."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Местоположението на хранилището на сертификати не е определено."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Частта преди местоположението \"%s\" трябва да е валидна директория."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Местоположението \"%s\" трябва да е файл."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Местоположението \"%s\" трябва да е директория."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Псевдонимът на сертификата не е определен."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Вече има заявка с псевдонима \"%s\"."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Сертификатът на зададеното място вече се използва  от друг псевдоним \"%s\"."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Не се поддържа хранилище на ключове от тип \"%s\"."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "Местоположението на хранилището на ключове не е определено."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Псевдонимът на ключа не е определен."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr "Ключът на зададеното място вече се използва от друг псевдоним \"%s\"."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Няма такъв CA."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Сертифициращият орган \"%s\" е непознат."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Неразпознат параметър или грешен тип на стойност."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr "Непозволен достъп.  Моля, опитайте операцията отново, като root.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Моля, проверете дали услугата certmonger е стартирала.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr "Моля, проверете дали услугата certmonger все още работи.\n"
diff --git a/po/bn.po b/po/bn.po
index 2e1770a..92d5134 100644
--- a/po/bn.po
+++ b/po/bn.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Bengali (http://www.transifex.com/projects/p/fedora/language/"
-"bn/)\n"
+"Language-Team: Bengali (http://www.transifex.com/projects/p/certmonger/"
+"language/bn/)\n"
 "Language: bn\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/bn_IN.po b/po/bn_IN.po
index 402389d..5e64e71 100644
--- a/po/bn_IN.po
+++ b/po/bn_IN.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Bengali (India) (http://www.transifex.com/projects/p/fedora/"
-"language/bn_IN/)\n"
+"Language-Team: Bengali (India) (http://www.transifex.com/projects/p/"
+"certmonger/language/bn_IN/)\n"
 "Language: bn_IN\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/bo.po b/po/bo.po
index 9c138a6..c7744c5 100644
--- a/po/bo.po
+++ b/po/bo.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Tibetan (http://www.transifex.com/projects/p/fedora/language/"
-"bo/)\n"
+"Language-Team: Tibetan (http://www.transifex.com/projects/p/certmonger/"
+"language/bo/)\n"
 "Language: bo\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/br.po b/po/br.po
index 171ffaf..5c4f09f 100644
--- a/po/br.po
+++ b/po/br.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Breton (http://www.transifex.com/projects/p/fedora/language/"
-"br/)\n"
+"Language-Team: Breton (http://www.transifex.com/projects/p/certmonger/"
+"language/br/)\n"
 "Language: br\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/brx.po b/po/brx.po
index a7464c6..c15bf20 100644
--- a/po/brx.po
+++ b/po/brx.po
@@ -1,28 +1,29 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Bodo (http://www.transifex.com/projects/p/certmonger/language/brx/)\n"
+"Language-Team: Bodo (http://www.transifex.com/projects/p/certmonger/language/"
+"brx/)\n"
+"Language: brx\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: brx\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/bs.po b/po/bs.po
index 11974d6..dbe284c 100644
--- a/po/bs.po
+++ b/po/bs.po
@@ -7,11 +7,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Bosnian (http://www.transifex.com/projects/p/fedora/language/"
-"bs/)\n"
+"Language-Team: Bosnian (http://www.transifex.com/projects/p/certmonger/"
+"language/bs/)\n"
 "Language: bs\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ca.po b/po/ca.po
index d94190d..317025b 100644
--- a/po/ca.po
+++ b/po/ca.po
@@ -1,28 +1,29 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Catalan (http://www.transifex.com/projects/p/certmonger/language/ca/)\n"
+"Language-Team: Catalan (http://www.transifex.com/projects/p/certmonger/"
+"language/ca/)\n"
+"Language: ca\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: ca\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/certmonger.pot b/po/certmonger.pot
index 2d727db..3cf950b 100644
--- a/po/certmonger.pot
+++ b/po/certmonger.pot
@@ -6,9 +6,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: certmonger 0.74.90\n"
+"Project-Id-Version: certmonger 0.74.93\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -17,12 +17,12 @@ msgstr ""
 "Content-Type: text/plain; charset=CHARSET\n"
 "Content-Transfer-Encoding: 8bit\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +34,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +133,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,703 +168,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -910,7 +977,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -923,120 +990,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/cs.po b/po/cs.po
index 1a6a0c6..67b3ec1 100644
--- a/po/cs.po
+++ b/po/cs.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Czech (http://www.transifex.com/projects/p/fedora/language/"
-"cs/)\n"
+"Language-Team: Czech (http://www.transifex.com/projects/p/certmonger/"
+"language/cs/)\n"
 "Language: cs\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/cs_CZ.po b/po/cs_CZ.po
index e4bf5c8..9b31e2f 100644
--- a/po/cs_CZ.po
+++ b/po/cs_CZ.po
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Czech (Czech Republic) (http://www.transifex.com/projects/p/"
@@ -19,12 +19,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Chyba při pasování odpovědi serveru.\n"
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr "Chyba při připojování k D-Bus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>vyprší: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "neznámý"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>email: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>dns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,121 +992,126 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 #, fuzzy
 msgid "Error parsing arguments."
 msgstr "Chyba při pasování odpovědi serveru.\n"
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/cy.po b/po/cy.po
index 77a77d7..67a6218 100644
--- a/po/cy.po
+++ b/po/cy.po
@@ -1,28 +1,30 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Welsh (http://www.transifex.com/projects/p/certmonger/language/cy/)\n"
+"Language-Team: Welsh (http://www.transifex.com/projects/p/certmonger/"
+"language/cy/)\n"
+"Language: cy\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: cy\n"
-"Plural-Forms: nplurals=4; plural=(n==1) ? 0 : (n==2) ? 1 : (n != 8 && n != 11) ? 2 : 3;\n"
+"Plural-Forms: nplurals=4; plural=(n==1) ? 0 : (n==2) ? 1 : (n != 8 && n != "
+"11) ? 2 : 3;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/da.po b/po/da.po
index 9a7c95d..c01aefc 100644
--- a/po/da.po
+++ b/po/da.po
@@ -8,23 +8,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Danish (http://www.transifex.com/projects/p/fedora/language/"
-"da/)\n"
+"Language-Team: Danish (http://www.transifex.com/projects/p/certmonger/"
+"language/da/)\n"
 "Language: da\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Kunne ikke bestemme værtsnavnet af CA.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Kunne ikke læse signeringsforespørgsel.\n"
@@ -36,9 +36,9 @@ msgstr "Fejl under opsætning af XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Fejl under fortolkning af serversvar.\n"
@@ -69,9 +69,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Fejl under opsætning af XMLRPC.\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -137,7 +137,7 @@ msgstr "Løbet tør for hukommelse.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Fejl under forbindelse til DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Kontrollér at tjenesten for beskedbussen (D-Bus) kører.\n"
@@ -172,86 +172,86 @@ msgstr "Modtog fejlrespons fra lokal tjeneste %s.\n"
 msgid "No response received from %s service.\n"
 msgstr "Intet svar modtaget fra tjenesten %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Fejl under initialisering af Kerberos-biblioteket: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Kunne ikke evaluere OID \"%s\".\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kunne ikke fortolke hovednavn for Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kunne ikke aftolke hovednavn for Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Fejl: ubrugte ekstra-argumenter blev angivet.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Databaseplacering eller kaldenavn angivet uden den anden.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Databasemappe og certifikatfil er begge angivet.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr "Ingen databasemappe og kaldenavn eller certifikat-fil angivet.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Nøgle og certifikat kan ikke blive gemt i den samme fil.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -260,39 +260,39 @@ msgstr ""
 "IPA-motoren kræver brug af tilvalget -K (hovednavn), når tilvalget -N "
 "(emnenavn) er brugt.\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Ingen CA med navnet \"%s\" fundet.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Fejl under indstilling af forespørgselsargumenter.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Ny signeringsforespørgsel \"%s\" tilføjet.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Ny signeringsforespørgsel kunne ikke tilføjes.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Ny sporingsforespørgsel \"%s\" tilføjet.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Ny sporingsforespørgsel kunne ikke tilføjes.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -300,598 +300,666 @@ msgid ""
 msgstr ""
 "Intet ID eller databasemappe og -kaldenavn eller certifikatfil angivet.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Forspørgsel \"%s\" ændret.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Forespørgsel \"%s\" kunne ikke ændres.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Ingen forespørgsel fundet, som matchede argumenter.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Forespørgsel \"%s\" fjernet.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Forespørgsel \"%s\" kunne ikke fjernes.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Fejl under ændring af \"%s\".\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Gensender \"%s\" til \"%s\".\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Gensender \"%s\".\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Fejl under forsøg på sending \"%s\" til \"%s\".\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Fejl under forsøg på sending \"%s\".\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Antallet af certifikater og forespørgsler som spores: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Forespørgsels-id \"%s\":\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tstatus: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-fejl: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tsat fast: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>lagring for nøglepar: "
 "type=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "INGEN"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",placering='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",kaldenavn='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",symbol='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfil='%s'"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>certifikat: type=%s,"
 "placering='%s'"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tudsteder: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\temne: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tudløber: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "ukendt"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\te-post: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\thovednavn: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tspor: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-forny: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA \"%s\":\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-type: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\thjælperplacering: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tnæste serienummer: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tkendte udstedernavne:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - udrulningsværktøj for klientcertifikat\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Brug: %s forespørgsel [tilvalg]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Påkrævede argumenter:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Hvis der bruges en NSS-database til lagring:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d MAPPE\tNSS-database for nøgle og certifikat\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr "  -n NAVN\tkaldenavn for NSS-baseret lagring (kun gyldig med -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAVN\tvalgfri symbolnavn til NSS-baseret lagring (kun gyldig med -d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Hvis filer bruges til lagring:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FIL\tPEM-fil til privat nøgle\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FIL\tPEM-fil til certifikat (kun gyldig med -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Hvis nøgler skal krypteres:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FIL\tfilen som indeholder krypterings-PIN\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN-værdi\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Valgfri argumenter:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Indstillinger for certifikathåndtering:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAVN\tkaldenavn at tillægge forespørgslen\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g STØRRELSE\tstørrelsen på nøglen som skal genereres hvis der ikke "
 "allerede findes en\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tforsøg at forny certifikatet når udløbsdatoen er nær (standard)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr "  -R\t\tforsøg ikke at forny certifikatet når udløbsdatoen er nær\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tbrug den angivne CA i stedet for standarden\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parametre til signeringsforespørgsel:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N NAVN\tangiv forespurgt emnenavn (standard: CN=<værtsnavn>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTBRUG\tangiv forespurgt udvidet nøglebrug OID\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAVN\tangiv forespurgt hovednavn\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAVN\tangiv forespurgt DNS-navn\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E E-POST\tangiv forespurgt e-post-adresse\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Busindstillinger:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tforbind til certmonger-tjenesten i systembussen\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tforbind til certmonger-tjenesten i sessionsbussen\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Andre tilvalg:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 "  -v<span class=\"whitespace other\" title=\"Tab\">»</span>rapportér alle "
 "deltaljer om fejl\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Brug: %s start-sporing [tilvalg]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Hvis en eksisterende forespørgsel redigeres:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAVN\tkaldenavn for eksisterende fulgt forespørgsel\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Hvis nøgler er krypteret:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAVN\tkaldenavn at give til fulgt forespørgsel\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parametre til signeringsforespørgsel ved fornyelsestidspunkt:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTBRUG\toverskriv forespurgt udvidet nøglebrug OID\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAVN\toverskriv forespurgt hovednavn\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAVN\toverskriv forespurgt DNS-navn\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E E-POST\toverskriv forespurgt e-post-adresse\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Brug: %s stop-sporing [tilvalg]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Efter forespørgselsidentifikator:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAVN\tkaldenavn for fulgt forespørgsel\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Brug: %s resubmit [tilvalg]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FIL\tPEM-fil til certifikat\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nye parameterværdier til signering af forespørgsel:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAVN\tnyt kaldenavn at give til fulgt forespørgsel\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tbrug den angivne CA i stedet for den nuværende\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Brug %s list [tilvalg]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Generelle tilvalg:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\tvis kun forespørgsler og certifikater forbundet med denne CA\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tvis kun information om specielle forespørgsler\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tvis kun information om fulgte certifikater\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Hvis en specifik forespørgsel vælges:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d MAPPE<span class=\"whitespace other\" title=\"Tab\">»</span>oplister "
 "kun forespørgsler og certs som bruger denne NSS-database\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAVN<span class=\"whitespace other\" title=\"Tab\">»</span>oplister kun "
 "forespørgsler og certs som bruger dette kaldenavn\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FIL<span class=\"whitespace other\" title=\"Tab\">»</span>oplister kun "
 "forespørgsler og certs, som er gemt i denne PEM-fil\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tforbind til tjenesten certmonger i systembussen\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tforbind til tjenesten certmonger i sessionsbussen\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Brug: %s vis-cas [tilvalg]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\tvis kun information om CA'et med dette navn\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Brug: %s forespørgsel [tilvalg]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "  -c CA\tvis kun information om CA'et med dette navn\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: ukendt kommando\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Kunne ikke bestemme hovednavn for signeringsforespørgsel.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Kunne ikke bestemme placeringen af CA's XMLRPC-server.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Kunne ikke bestemme placeringen af CA's XMLRPC-server.\n"
+msgstr ""
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "Kunne ikke bestemme placeringen af CA's XMLRPC-server.\n"
+msgstr ""
 
 #: src/main.c:120
 #, c-format
@@ -934,7 +1002,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Der opstod en intern fejl."
 
@@ -947,120 +1015,125 @@ msgstr "Intet matchende element fundet.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Der er allerede en CA med kaldenavnet \"%s\"."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Certifikatslagringstype er ikke angivet."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Certifikatslagringstype \"%s\" er ikke understøttet."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Placeringen \"%s\" skal være en absolut sti."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Certifikatslagringsplacering er ikke angivet."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Placeringen over \"%s\" skal være en gyldig mappe."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Placeringen \"%s\" skal være en fil."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Placeringen \"%s\" skal være en mappe."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Certifikatkaldenavn ikke angivet."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Der er allerede en forespørgsel med kaldenavnet \"%s\"."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Nøglelagringstype \"%s\" er ikke understøttet."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "Nøglelagringsplacering er ikke angivet."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Nøglekaldenavn er ikke angivet."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Ingen sådan CA."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Certifikatsautoritet \"%s\" er ikke kendt."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Ikke opdaget parameter eller forkert værditype."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/de.po b/po/de.po
index c40b19a..601ab87 100644
--- a/po/de.po
+++ b/po/de.po
@@ -11,23 +11,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: German (http://www.transifex.com/projects/p/fedora/language/"
-"de/)\n"
+"Language-Team: German (http://www.transifex.com/projects/p/certmonger/"
+"language/de/)\n"
 "Language: de\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Rechnername der Zertifizierungsstelle konnte nicht ermittelt werden.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Signaturanfrage konnte nicht gelesen werden.\n"
@@ -39,9 +39,9 @@ msgstr "Fehler beim Einrichten von XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Fehler beim Abfragen der Serverantwort.\n"
@@ -72,9 +72,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Kein Profil/ Vorlage (-T) angegeben, Standarwert nicht gesetzt.\n"
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Fehler beim Einrichten von XMLRPC.\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -140,7 +140,7 @@ msgstr "Ungenügend Speicher.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Fehler beim Verbinden zu D-Bus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Bitte überprüfen Sie, ob der D-Bus-Dienst läuft.\n"
@@ -175,90 +175,90 @@ msgstr "Fehlermeldung erhalten vom lokalen Dienst %s.\n"
 msgid "No response received from %s service.\n"
 msgstr "Keine Antwort vom %s-Dienst erhalten.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Fehler bei der Initialisierung der Kerberos-Bibliothek: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Unbekannte SchlüsselBenutzung »%s«.\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "OID »%s« konnte nicht ermittelt werden.\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fehler beim Parsen des Principal-Namens »%s« für Kerberos: %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fehler beim Unparsen des Principal-Namens »%s« für Kerberos: %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: Option erfordert einen Parameter -- »%c«\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: ungültige Option -- »%c«\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Fehler: unbenötigter, zusätzlicher Parameter »%s«.\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Fehler: unbenötigte, zusätzliche Parameter wurden angegeben.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Ort der Datenbank oder Kurzname allein angegeben.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 "Sowohl Datenbankordner als auch Zertifikatdatei wurden nicht angegeben.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 "Weder Datenbankordner noch Kurzname oder Zertifikatdatei wurden angegeben.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "Schlüssel und Zertifikat können nicht in der gleichen Datei gespeichert "
 "werden.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -267,39 +267,39 @@ msgstr ""
 "Das IPA-Backend benötigt die Option -K (Name des Principals), wenn die "
 "Option -N (Name des Subjekts) verwendet wird.\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Keine Zertifizierungsstelle mit dem Namen »%s« gefunden.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Fehler beim Setzen der Anfrageparameter.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Neue Signaturanfrage »%s« wurde hinzugefügt.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Neue Signaturanfrage konnte nicht hinzugefügt werden.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Neue Überwachungsanfrage »%s« wurde hinzugefügt.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Neue Überwachungsanfrage konnte nicht hinzugefügt werden.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -307,321 +307,371 @@ msgid ""
 msgstr ""
 "Kennung, Datenbankordner, Kurzname und Zertifikatdatei nicht angegeben.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Anfrage »%s« wurde geändert.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Anfrage »%s« konnte nicht geändert werden.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Keine Anfrage mit angegebenem Kurznamen gefunden.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Keine mit den Parametern übereinstimmende Anfrage gefunden.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Anfrage »%s« wurde entfernt.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Anfrage »%s« konnte nicht entfernt werden.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Fehler beim Bearbeiten von »%s«.\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "»%s« erneut an »%s« übertragen.\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "»%s« erneut übertragen.\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Fehler beim Versuch, »%s« an »%s« zu übertragen.\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Fehler beim Versuch, »%s« zu übertragen.\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Anzahl der Zertifikate und überwachten Anfragen: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Anfragekennung »%s«:\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tStatus: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tCA-Fehler: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tstecken geblieben: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tSchlüsselpaar-Speicher: Typ=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "NICHTS"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",Ort=»%s«"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",Kurzname=»%s«"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",Token=»%s«"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",PIN=»%s«"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",PIN-Datei=»%s«"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tZertifikat: Typ=%s, Ort=»%s«"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tAusgabestelle: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tSubjekt: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tAblauf: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "unbekannt"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\tE-Mail: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tDNS: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tPrincipal-Name: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 "Schlüsselbenutzung: %s\n"
 "\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\tEKU: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "»Befehl vor dem Speichern: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "»Befehl nach dem Speichern: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tTrack: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tAuto-Erneuern: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA »%s«:\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tCA-Typ: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tHelper-Speicherort: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tNächste Seriennummer: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tBekannte Ausstellernamen:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - Tool z. Client-Zertifikatanmeldung\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Aufruf: %s request [Optionen]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Benötigte Parameter:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Falls in einer NSS-Datenbank gespeichert wird:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tNSS-Datenbank für Schlüssel und Zertifikat\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr "  -n NAME\tKurzname für NSS-basierte Speicherung (nur gültig mit -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAME\toptionaler Token-Name für NSS-basierte Speicherung (nur gültig "
 "mit -d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Falls Dateien zum Speichern verwendet werden:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k DATEI\tPEM-Datei für geheimen Schlüssel\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f DATEI\tPEM-Datei für Zertifikat (nur gültig mit -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Falls Schlüssel verschlüsselt werden sollen:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p DATEI\tDatei, welche die Verschlüsselungs-PIN enthält\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN-Wert\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Optionale Parameter:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Einstellungen für Umgang mit Zertifikaten:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME\tder Anfrage zuzuordnender Kurzname\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g GRÖSSE\tGröße des zu generierenden Schlüssels, falls noch keiner "
 "vorhanden ist\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tversuchen, kurz vor Ablauf das Zertifikat zu erneuern (Standard)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -r\t\tnicht versuchen, kurz vor Ablauf das Zertifikat zu erneuern "
 "(Standard)\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 "  -c CA\tAngegebene Zertifizierungsstelle statt der aktuellen verwenden\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -629,289 +679,308 @@ msgstr ""
 "  -T PROFILE\tAnfrage an CA, um den Antrag unter Verwendung des benannten "
 "Profils oder der Vorlage auszuführen\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parameter für die Signaturanfrage:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAME\tAngefragten Subjektnamen festlegen (Standard: CN=<hostname>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\tAngefragte OID für erweiterte Schlüsselverwendung festlegen\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 "  -u SCHLÜSSELNUTZUNG\tGewünschter Wert für SchlüsselBenutzung setzen\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME\tAngefragten Principal-Namen festlegen\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAME\tAngefragten DNS-Namen festlegen\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\tAngefragte E-Mail-Adresse festlegen\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Busoptionen:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tmit dem Certmonger-Dienst über den Systembus verbinden\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -S\t\tmit dem Certmonger-Dienst über den Sitzungsbus verbinden\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Weitere Optionen:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr " -B»Auszuführender Befehl vor dem Speichern des Zertifikats\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr " -C\tAuszuführender Befehl nach dem Speichern des Zertifikats\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tAlle Fehlerdetails ausgeben\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Aufruf: %s start-tracking [Optionen]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Falls eine existierende Anfrage geändert wird:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME\tKurzname für existierende Überwachungsanfrage\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Falls Schlüssel verschlüsselt sind:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME\tNeuer Kurzname für die Überwachungsanfrage\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parameter für die Signaturanfrage zum Zeitpunkt der Erneuerung:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\tAngefragte OID für erweiterte Schlüsselverwendung "
 "überschreiben\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME\tangefragten Principal-Name überschreiben\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\tangefragten DNS-Namen überschreiben\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\tangefragte E-Mail-Adresse überschreiben\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Aufruf: %s stop-tracking [Optionen]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Nach Anfrage-Kennung:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME\tKurzname für Überwachungsanfrage\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Aufruf: %s resubmit [Optionen]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f DATEI\tPEM-Datei des Zertifikats\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Neue Parameterwerte für die Signaturanfrage:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\tNeuer Kurzname für die Überwachungsanfrage\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 "  -c CA\t\tAngegebene Zertifizierungsstelle statt der aktuellen verwenden\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Aufruf: %s list [Optionen]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Allgemeine Optionen:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\tNur die dieser Zertifizierungsstelle zugeordneten Anfragen und "
 "Zertifikate auflisten\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tNur Informationen zu offenen Anfragen auflisten\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tNur Informationen zu überwachten Zertifikaten auflisten\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Falls bestimmte Anfrage ausgewählt wird:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d VERZ\tnur Anfragen und Zertifikate auflisten, die diese NSS-Datenbank "
 "nutzen\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAME\tnur Anfragen und Zertifikate auflisten, die diesen Kurznamen "
 "nutzen\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f DATEI\tnur Anfragen und Zertifikate auflisten, die in dieser PEM-Datei "
 "gespeichert sind\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tmit dem Certmonger-Dienst über den Systembus verbinden\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -S\tmit dem Certmonger-Dienst über den Sitzungsbus verbinden\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Aufruf: %s list-cas [Optionen]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 "  -c CA\tNr Informationen zu Zertifizierungsstellen dieses Namens auflisten\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Aufruf: %s request [Optionen]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+"  -c CA\tNr Informationen zu Zertifizierungsstellen dieses Namens auflisten\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: Unbekannter Befehl.\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 "Die -t Option kann nicht zusammen mit der -K Option verwendet werden.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 "Die -k Option kann nicht zusammen mit der -K Option verwendet werden.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 "Die -K Option kann weder mit der -k noch der -t Option verwendet werden.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Principal-Name für Signaturanfrage konnte nicht ermittelt werden.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "XMLRPC-Serverort des Zertifikats konnte nicht ermittelt werden.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "XMLRPC-Serverort des Zertifikats konnte nicht ermittelt werden.\n"
+msgstr ""
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "XMLRPC-Serverort des Zertifikats konnte nicht ermittelt werden.\n"
+msgstr ""
 
 #: src/main.c:120
 #, c-format
@@ -954,7 +1023,7 @@ msgstr "\t-p FILE    Dienst-PID in Datei schreiben\n"
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         NSS in FIPS-Modus ausführen\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Ein interner Fehler ist aufgetreten."
 
@@ -967,63 +1036,68 @@ msgstr "Kein passender Eintrag gefunden.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Es gibt bereits ein Zertifikat mit dem Kurznamen »%s«."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Speichertyp des Zertifikats wurde nicht angegeben."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Speichertyp »%s« des Zertifikats wird nicht unterstützt."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Der Ort »%s« muss ein absoluter Pfad sein."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Speicherort für Zertifikat ist nicht angegeben."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Übergeordnete Ebene des Ortes »%s« muss ein gültiger Ordner sein."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Der Ort »%s« muss eine Datei sein."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Der Ort »%s« muss ein Ordner sein."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Kurzname des Zertifikats nicht angegeben."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Es gibt bereits eine Anfrage mit dem Kurznamen »%s«."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
@@ -1031,62 +1105,62 @@ msgstr ""
 "Zertifikat am gleichen Speicherort wird bereits von Anfrage mit Kurznamen "
 "»%s« verwendet."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Speichertyp »%s« für Schlüssel nicht unterstützt."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "Speicherort des Schlüssels wurde nicht angegeben."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Kurzname des Schlüssels nicht angegeben."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Schlüssel am gleichen Speicherort wird bereits von Anfrage mit Kurznamen "
 "»%s« verwendet."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Keine solche Zertifizierungsstelle."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Zertifizierungsstelle »%s« ist unbekannt."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Nicht erkannter Parameter oder falscher Werttyp."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 "Unzureichende Berechtigung.  Bitte führen Sie die Aktion als Root aus.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Bitte überprüfen Sie, ob der Certmonger-Dienst gestartet wurde.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
 "Bitte vergewissern Sie sich, dass der Certmonger-Dienst immer noch läuft.\n"
diff --git a/po/de_CH.po b/po/de_CH.po
index 991e8db..3f87b3f 100644
--- a/po/de_CH.po
+++ b/po/de_CH.po
@@ -1,28 +1,29 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: German (Switzerland) (http://www.transifex.com/projects/p/certmonger/language/de_CH/)\n"
+"Language-Team: German (Switzerland) (http://www.transifex.com/projects/p/"
+"certmonger/language/de_CH/)\n"
+"Language: de_CH\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: de_CH\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/dz.po b/po/dz.po
index 4e264e2..cc11b8e 100644
--- a/po/dz.po
+++ b/po/dz.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Dzongkha (http://www.transifex.com/projects/p/fedora/language/"
-"dz/)\n"
+"Language-Team: Dzongkha (http://www.transifex.com/projects/p/certmonger/"
+"language/dz/)\n"
 "Language: dz\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/el.po b/po/el.po
index ed9975a..753a7e9 100644
--- a/po/el.po
+++ b/po/el.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Greek (http://www.transifex.com/projects/p/fedora/language/"
-"el/)\n"
+"Language-Team: Greek (http://www.transifex.com/projects/p/certmonger/"
+"language/el/)\n"
 "Language: el\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/en_GB.po b/po/en_GB.po
index b92a385..2edfc8a 100644
--- a/po/en_GB.po
+++ b/po/en_GB.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: English (United Kingdom) (http://www.transifex.com/projects/p/"
-"fedora/language/en_GB/)\n"
+"certmonger/language/en_GB/)\n"
 "Language: en_GB\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/eo.po b/po/eo.po
index 318bddf..61702a2 100644
--- a/po/eo.po
+++ b/po/eo.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Esperanto (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Esperanto (http://www.transifex.com/projects/p/certmonger/"
 "language/eo/)\n"
 "Language: eo\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/es.po b/po/es.po
index 1a8a364..649e6e2 100644
--- a/po/es.po
+++ b/po/es.po
@@ -5,32 +5,35 @@
 # Translators:
 # Claudio Rodrigo Pereyra Diaz <elsupergomez@gmail.com>, 2011, 2012
 # Daniel Cabrera <logan@fedoraproject.org>, 2011
-# Domingo Becker <domingobecker@gmail.com>, 2011
+# beckerde <domingobecker@gmail.com>, 2011
 # vareli <ehespinosa@ya.com>, 2013
 # Gladys Guerrero <gguerrer@redhat.com>, 2012
 # Daniel Cabrera <logan@fedoraproject.org>, 2011
+# Henderb Rodriguez <henderbj@gmail.com>, 2014
+# Hernan Gabriel Alvarez Guerra <hernan.alvarez.guerra@gmail.com>, 2014
 # Nalin Dahyabhai <nalin@fedoraproject.org>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
-"Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Spanish (http://www.transifex.com/projects/p/fedora/language/"
-"es/)\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-06-02 12:48+0000\n"
+"Last-Translator: Hernan Gabriel Alvarez Guerra <hernan.alvarez.guerra@gmail."
+"com>\n"
+"Language-Team: Spanish (http://www.transifex.com/projects/p/certmonger/"
+"language/es/)\n"
 "Language: es\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "No es posible determinar el nombre del equipo de CA.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "No es posible leer la petición de identificación.\n"
@@ -42,9 +45,9 @@ msgstr "Error al definir XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Error analizando la respuesta del servidor.\n"
@@ -57,7 +60,7 @@ msgstr "Error de servidor.\n"
 #: src/dogtag.c:358
 #, c-format
 msgid "Requested renewal, but no serial number provided.\n"
-msgstr ""
+msgstr "Se solicitó renovación, pero no se indicó númerio de serie.\n"
 
 #: src/dogtag.c:362
 #, c-format
@@ -77,9 +80,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Sin pérfil/plantilla (-T) dado, y no hay conocido por defecto\n"
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Error al definir XMLRPC.\n"
+msgstr "Error al apagar NSS\n"
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -119,7 +122,7 @@ msgstr ""
 #: src/getcert.c:118
 #, c-format
 msgid "Path \"%s\": insufficient permissions.\n"
-msgstr ""
+msgstr "Ruta \"%s\": permisos insuficientes.\n"
 
 #: src/getcert.c:124
 #, c-format
@@ -146,7 +149,7 @@ msgstr "Falta memoria.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Error conectando con DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -183,80 +186,80 @@ msgstr "Se ha recibido una respuesta de erro desde el servicio %s local.\n"
 msgid "No response received from %s service.\n"
 msgstr "No se ha recibido una respuesta desde el servicio %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Erro al inicializar la biblioteca Kerberos: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
-msgstr ""
+msgstr "Sin soporte para generar las llaves \"%s\"\n"
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
-msgstr ""
+msgstr "Los tipos de llaves conocidos incluyen:"
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "keyUsage \"%s\" no reconocido.\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "No se pudo evaluar OID \"%s\".\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Error analizando el nombre  \"%s\"del principal de Kerberos: %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 "Error al dejar de analizar el nombre \"%s\" del principal de Kerberos: %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: opción requiere un argumento -- '%c'\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: opción no valida -- '%c'\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Error: argumento extra no utilizado \"%s\".\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Error: se enviaron argumentos extra no usados.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 "La ubicación de la base de datos, o el apodo, han sido indicados el uno sin "
 "el otro.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 "Han sido especificados el directorio de la base de datos y el archivo de "
 "certificado.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -264,14 +267,14 @@ msgstr ""
 "No han sido especificados ni el directorio de la base de datos, ni el apodo "
 "del archivo de certificado.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "La llave y el certificado no pueden ambos ser guardados en un mismo "
 "archivo.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -280,39 +283,39 @@ msgstr ""
 "El motor de IPA necesita la utilización de la opción -K (el nombre del "
 "principal) cuando se esté utilizando la opción -N (el nombre del asunto).\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "No se ha encontrado un CA con el nombre \"%s\".\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Error al definir los argumentos de la petición.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Ha sido agregada una nueva petición \"%s\" de identificación.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Ha se ha podido agregar la nueva petición de identificación.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Nueva solicitud de seguimiento \"%s\" agregada.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Nueva solicitud de seguimiento no puede ser agregada.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -321,327 +324,379 @@ msgstr ""
 "No se ha especificado ningún ID, o directorio de base de datos y apodo, o "
 "archivo de certificado.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Solicitud \"%s\" modificada.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Solicitud \"%s\" no puede ser modificada.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "No han sido halladas peticiones con el alias indicado.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "No se encontraron solicitudes que coincidan con los argumentos.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Solicitud \"%s\" eliminada.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "La solicitud \"%s\" no pudo ser eliminada.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Error modificando \"%s\".\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Reenviando \"%s\" to \"%s\".\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Reenviando \"%s\".\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Error intentando enviar \"%s\" hacia \"%s\".\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Error intentando enviar \"%s\".\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 "Cantidad de peticiones y certificados que están siendo rastrados: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID de solicitud '%s':\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\testado: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-error: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tstuck: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>par de clave "
 "almacenada: tipo=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "NINGUNO"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",ubicación='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",usuario='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",archivopin='%s'"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>certificado: tipo=%s,"
 "ubicación='%s'"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tgenerador: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tasunto: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\texpira: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "desconocido"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\tcorreo electrónico: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tnombre del principal: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
-msgstr ""
+msgstr "⇥Dirección IP:"
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 "\tutilización de clave: %s\n"
 "\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tcomando de almacenado previo: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tcomando de almacenado posterior: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttrack: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto renovación: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttipo de tca: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tubicación del asistente: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tnúmero de serie siguiente: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnombres de generadores conocidos:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s . herramienta de inscripción de certificado de cliente\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Utilización: petición %s [opciones]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Argumentos requeridos:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 "* si se está utilizando para el almacenamiento una base de datos NSS:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tbase de datos NSS para la llave y el certificado\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAME\tapodo para el almacenamiento basado en NSS (sólo valido con -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAME\tnombre opcional de la ficha para el almacenamiento basado en NSS "
 "(sólo valido con -d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* si se están utilizando archivos para el almacenamiento:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE\tarchivoPEM para la llave privada\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE\tarchivo PEM para el certificado (sólo válido con -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* si la llaves serán cifradas:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\tarchivo que contiene el PIN de cifrado\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tvalor del PIN\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Argumentos opcionales:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Configuración de la manipulación del certificado:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME\tapodo a ser asignado a la petición\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
+"-G TYPE⇥tipo de llave a ser generada si no hay alguna en su lugar\n"
+"\n"
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g SIZE\ttamaño de la llave a ser generada si aún no existe ninguna\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tintento de renovación del certificado cuando el momento de "
 "expiración esté próximo (predeterminado)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tno intentar renovar el certificado cuando el momento de expiración "
 "esté próximo\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tutilizar el CA indicado en lugar del predeterminado\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -649,293 +704,321 @@ msgstr ""
 "  -T PROFILE\tpide a CA el proceso de la solicitud utilizando el perfil o el "
 "modelo invocado\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parámetros para la petición de identificación:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAME\tdefine el nombre del asunto solicitado (predeterminado: "
 "CN=<nombre del equipo>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\tdefine  la utilización OID de la extensión de la llave "
 "solicitada\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 "  -u KEYUSAGE\tfijado el valor de utilzación de clave pedido\n"
 "\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME\tdefine el nombre del principal solicitado\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAME\tdefine el nombre DNS solicitado\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\tdefine la dirección de correo electrónico solicitada\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
-msgstr ""
+msgstr "  -A ADDRESS⇥define la dirección IP solicitada\n"
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Opciones de Bus:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tconectar al servicio certmonger en el bus del sistema\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tconectar al servicio certmonger en el bus de sesión\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Otras opciones:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tcomando a ejecutar antes de guardar el certificado\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tcomando a ejecutar luego de guardar el certificado\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 "  -v<span class=\"whitespace other\" title=\"Tab\">»</span>informar todos "
 "los detalles de errores\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Utilización: %s iniciar seguimiento [opciones]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Si se está modificando una petición existente:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME\tnombre de apodo de una petición de seguimiento existente\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Si las llaves se encuentran cifradas:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME\tapodo a darle a la petición de seguimiento\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 "* Parámetros para la solicitud de firma en el momento de la renovación:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\treemplazar la utilización de llave extendida OID solicitada\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME\treemplazar el nombre principal solicitado\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\treemplazar el nombre DNS solicitado\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\treemplazar la dirección de correo electrónico solicitada\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
-msgstr ""
+msgstr "  -A ADDRESS⇥remplazar la dirección IP solicitada\n"
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Utilziación: %s detener seguimiento [opciones]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Por identificador de petición:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME\tapodo de la petición de seguimiento\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Utilización: %s volver a enviar [opciones]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE\tarchivo PEM del certificado\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nuevos valores de los parámetros de la petición de identificación:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\tnuevo apodo a darle a la petición de seguimiento\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tutilizar el CA indicado en lugar del actual\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Utilización: %s lista [opciones]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Opciones generales:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\tlista sólo las peticiones y los certificados asociados con este CA\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tlista sólo la información acerca de peticiones destacadas\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tlista sólo información acerca de certificados en seguimiento\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Si selecciona un pedido específico:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR<span class=\"whitespace other\" title=\"Tab\">»</span> sólo lista "
 "los pedidos y certificados que usa esta base de datos NSS\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NOMBRE<span class=\"whitespace other\" title=\"Tab\">»</span>sólo lista "
 "los pedidos y certificados que usan este apodo\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f ARCHIVO <span class=\"whitespace other\" title=\"Tab\">»</span>sólo "
 "lista los pedidos y certificados guardados en este archivo PEM\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tconectar con el servicio certmonger en el bus del sistema\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tconectar con el servicio certmonger en el bus de la sesión\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Utilización: %s list-cas [opciones]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 "  -c CA\tlista sólo la información de este nombre relacionada con el CA\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Utilización: petición %s [opciones]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+"  -c CA\tlista sólo la información de este nombre relacionada con el CA\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: comando no reconocido\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "La opción -t no puede ser utilizada junto con la opción -K.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "La opción -k no puede ser utilizada junto con la opción -K.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 "La opción -K no puede ser utilizada junto con la opción -k, ni con la opción "
 "-t.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 "No es posible determinar el nombre del principal para la petición de "
 "identificación.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "No es posible determinar la ubicación del servidor CA XMLRPC.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
+"Error definiendo ccache para el servicio del \"equipo\" utilizando el keytab "
+"predeterminado: %s.\n"
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
+"Error definiendo ccache para \"%s\" en el cliente utilizando el keytab "
+"predeterminado: %s.\n"
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
+"Error definiendo ccache para el servicio del \"equipo\" en el cliente "
+"utilizando el keytab \"%s\": %s\n"
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
+"Error definiendo ccache para \"%s\" en el cliente utilizando el keytab \"%s"
+"\": %s.\n"
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
-msgstr ""
+msgstr "Error configurando para XMLRPC en el cliente\n"
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "No es posible determinar la ubicación del servidor CA XMLRPC.\n"
+msgstr "No es posible determinar la ubicación del servidor IPA LDAP\n"
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "No es posible determinar la ubicación del servidor CA XMLRPC.\n"
+msgstr ""
+"No es posible determinar la base DN de el dominio de en el servidor IPA\n"
 
 #: src/main.c:120
 #, c-format
@@ -980,7 +1063,7 @@ msgstr ""
 "\t-F         forzar NSS en modo FIPS\n"
 "\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Ha ocurrido un error interno."
 
@@ -993,64 +1076,72 @@ msgstr "No se ha encontrado una entrada coincidente.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Ya existe un CA con el apodo \"%s\"."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "No ha sido especificado el tipo de certificado de almacenamiento."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 "No existe soporte para el tipo \"%s\" de certificado de almacenamiento."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "La ubicación \"%s\" debe ser una ruta absoluta."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "No ha sido indicada una ubicación del certificado de almacenamiento."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
+"El padre de la ubicación \"%s\" no pudo ser accesado debido a permisos "
+"insuficientes."
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "El paterno de la ubicación \"%s\" debe ser un directorio válido."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "La ubicación \"%s\" debe ser un archivo."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
+"La ubicación \"%s\" no pudo ser accesada debido a permisos insuficientes."
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "La ubicación \"%s\" debe ser un directorio."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "No ha sido especificado un apodo de certificado."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Ya existe una petición con el apodo \"%s\"."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
@@ -1058,61 +1149,61 @@ msgstr ""
 "Un certificado en la misma ubicación ya está siendo utilizado por la "
 "petición hecha con el alias \"%s\"."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "No existe soporte para el tipo \"%s\" de llave de almacenamiento."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "No ha sido especificada una ubicación de la llave."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "No ha sido especificado un apodo de llave."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Una llave en la misma ubicación ya está siendo utilizada por la petición "
 "hecha con el alias \"%s\"."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
-msgstr ""
+msgstr "Sin soporte para tipo de llave %s\"."
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "No existe el CA."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "No se conoce la autoridad \"%s\" del certifiicado. "
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Parámetro irreconocible o tipo de valor erróneo."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
-msgstr ""
+msgstr "Error analizando argumentos."
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
-msgstr ""
+msgstr "Nombre de propiedad no reconocido."
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr "Acceso insuficiente.  Por favor reintente la operanción como root.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Por favor verifique que el servicio certmonger ha sido arrancado.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
 "Por favor verifique que el servicio certmonger está todavía corriendo.\n"
diff --git a/po/es_ES.po b/po/es_ES.po
index 8d500b8..2eaa610 100644
--- a/po/es_ES.po
+++ b/po/es_ES.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Spanish (Spain) (http://www.transifex.com/projects/p/fedora/"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/et.po b/po/et.po
index ac35783..5178e2f 100644
--- a/po/et.po
+++ b/po/et.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Estonian (http://www.transifex.com/projects/p/fedora/language/"
-"et/)\n"
+"Language-Team: Estonian (http://www.transifex.com/projects/p/certmonger/"
+"language/et/)\n"
 "Language: et\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/eu.po b/po/eu.po
index 691421e..b9b07ed 100644
--- a/po/eu.po
+++ b/po/eu.po
@@ -1,29 +1,30 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 # Asier Iturralde Sarasola <asier.iturralde@gmail.com>, 2012
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Basque (http://www.transifex.com/projects/p/certmonger/language/eu/)\n"
+"Language-Team: Basque (http://www.transifex.com/projects/p/certmonger/"
+"language/eu/)\n"
+"Language: eu\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: eu\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr "Errorea DBus-era konektatzean.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,700 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "ezezaguna"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Beharrezko argumentuak:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Hautazko argumentuak:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Beste aukerak:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Aukera orokorrak:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -908,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -921,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/eu_ES.po b/po/eu_ES.po
index 5df5309..dc65e1f 100644
--- a/po/eu_ES.po
+++ b/po/eu_ES.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Basque (Spain) (http://www.transifex.com/projects/p/fedora/"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/fa.po b/po/fa.po
index d165bfa..70361e4 100644
--- a/po/fa.po
+++ b/po/fa.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Persian (http://www.transifex.com/projects/p/fedora/language/"
-"fa/)\n"
+"Language-Team: Persian (http://www.transifex.com/projects/p/certmonger/"
+"language/fa/)\n"
 "Language: fa\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/fa_IR.po b/po/fa_IR.po
index eea62a8..54c72d5 100644
--- a/po/fa_IR.po
+++ b/po/fa_IR.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Persian (Iran) (http://www.transifex.com/projects/p/fedora/"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/fi.po b/po/fi.po
index 57acdf7..7f971b2 100644
--- a/po/fi.po
+++ b/po/fi.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Finnish (http://www.transifex.com/projects/p/fedora/language/"
-"fi/)\n"
+"Language-Team: Finnish (http://www.transifex.com/projects/p/certmonger/"
+"language/fi/)\n"
 "Language: fi\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/fr.po b/po/fr.po
index ce06237..b1be822 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -5,30 +5,30 @@
 # Translators:
 # dominique bribanick <chepioq@gmail.com>, 2012
 # Jérôme Fenal <jfenal@gmail.com>, 2012-2014
-# Joël Beaudoin <fedora.qc@hotmail.fr>, 2011
+# Joël Beaudoin <inactive+DiEOrLivE@transifex.com>, 2011
 # Kévin Raymond <shaiton@fedoraproject.org>, 2012
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:42+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-30 20:55+0000\n"
 "Last-Translator: Jérôme Fenal <jfenal@gmail.com>\n"
-"Language-Team: French (http://www.transifex.com/projects/p/fedora/language/"
-"fr/)\n"
+"Language-Team: French (http://www.transifex.com/projects/p/certmonger/"
+"language/fr/)\n"
 "Language: fr\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 "Impossible de déterminer le nom d'hôte de l'autorité de certification.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Impossible de lire la signature de la demande.\n"
@@ -40,9 +40,9 @@ msgstr "Erreur lors de la configuration de XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Erreur d'analyse de la réponse du serveur.\n"
@@ -77,9 +77,9 @@ msgstr ""
 "Aucune profil ou patron spécifié (-T), et aucune valeur par défaut connue.\n"
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Erreur lors de la configuration de XMLRPC.\n"
+msgstr "Erreur lors de l'arrêt de NSS.\n"
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -147,7 +147,7 @@ msgstr "Mémoire saturée.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Erreur de connexion à DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -184,79 +184,79 @@ msgstr "Un message d'erreur a été reçu du service local %s.\n"
 msgid "No response received from %s service.\n"
 msgstr "Pas de réponse du service %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Erreur lors de l'initialisation de la bibliothèque Kerberos : %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Absence de prise en charge de la création de clés « %s ».\n"
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr "Les types de clés connus incluent :"
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Utilisation de la clé « %s » inconnue.\\n\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Impossible d'évaluer OID « %s ».\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Erreur lors de l'analyse du nom principal Kerberos « %s » : %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 "Erreur lors de la récupération du nom principal Kerberos « %s » : %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s : cette option requiert un argument -- '%c'\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s : -- '%c' est une option invalide\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Erreur : l'argument supplémentaire « %s » est inutilisé.\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Erreur : des arguments supplémentaires inutilisés ont été fournis.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 "Un élément est manquant entre le nom de la base de données ou son nom.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 "Le répertoire de la base de données et le fichier de certificat ont été "
 "spécifiés.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -264,14 +264,14 @@ msgstr ""
 "Aucun répertoire de base de données, nom ou fichier de certificat n'ont été "
 "spécifiés.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "Les clés et les certificats ne peuvent être tous les deux enregistrés dans "
 "le même répertoire.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -280,39 +280,39 @@ msgstr ""
 "Le backend IPA requiert l'utilisation de l'option -K (nom principal) si "
 "l'option -N (nom d'objet) est utilisée.\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Pas d'autorité de certification avec le nom « %s » trouvé.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Erreur de paramétrage des arguments.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Nouvelle demande de signature de « %s » ajoutée.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "La nouvelle demande de signature n'a pas pu être ajoutée.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Nouvelle demande de suivi « %s » ajoutée.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "La nouvelle demande de suivi n'a pas pu être ajoutée.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -321,321 +321,371 @@ msgstr ""
 "Aucun ID ou répertoire de base de données ni de nom ou fichier de certificat "
 "spécifié.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Demande « %s » modifiée.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "La demande « %s » ne peux être modifiée.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Aucune demande trouvée avec le nom spécifié.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Aucune demande ne correspond aux arguments.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Demande « %s » suprimée.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Demande « %s » n'a pas pu être enlevée.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Erreur lors de la modification de « %s ».\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Nouvelle soumission de « %s » à « %s ».\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Nouvelle soumission de « %s ».\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Erreur en tentant de soumettre « %s » à « %s ».\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Erreur en tentant de soumettre « %s ».\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Le numéro des certificats et les demandes qui seront suivis : %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID de la demande « %s » :\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tétat : %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\terreur-ac : %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tbloqué : %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tpaire de clés de stockage : modèle = « %s »"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "Aucun"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ", emplacement = « %s »"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ", nom = « %s »"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ", jeton = « %s »"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ", pin = « %s »"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ", fichier pin = « %s »"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertificat : modèle = « %s », emplacement = « %s »"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tAutorité de certification : %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\témetteur : %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsujet : %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\texpiration : %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "inconnu"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\te-mail : "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns : "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tnom principal : "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr "\tAdresse IP : "
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tusage de la clé : %s\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku : "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tcommande de pré-sauvegarde : %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tcommande de post-sauvegarde : %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tchemin : %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renouvellement : %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "Autorité de certification « %s » :\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttype-ac : %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\templacement-de-l'-aide : %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tprochain-numéros-de-série : %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnoms-des-problèmes-identifiés :\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - outil d'inscription du certificat client\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Utilisation : %s request [options]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Arguments requis :\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Si vous utilisez une base de données NSS pour le stockage :\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d RÉPERTOIRES\tNSS base de données pour les clés et certificats\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NOM\tsurnom pour le stockage NSS-base (valide uniquement avec -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NOM\tnom de jeton optionel pour le stockage NSS-base (valide uniquement "
 "avec -d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Si vous utilisez des fichiers de stockage :\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FICHIER\tPEM fichier pour une clé privée\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FICHIER\tPEM fichier du certificat (valide uniquement avec -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Si les clés sont à chiffrer :\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FICHIER\tfichier qui contient le code PIN de chiffrement\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tvaleur PIN\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Arguments optionnels :\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Paramètres de gestion du certificat :\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NOM\tnom à attribuer à la demande\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr "  -G TYPE\ttype de la clé à créer si aucune n'existe déjà\n"
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g TAILLE\ttaille de la clé à générer si elle n'est pas déjà en place\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\ttente de renouveler le certificat lorsque l'expiration approche (par "
 "défaut)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tne pas tenter de renouveler le certificat lorsque l'expiration "
 "approche\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 "  -c AC\t\tutiliser l'autorité de certification spécifié, plutôt que celui "
 "par défaut\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -643,250 +693,270 @@ msgstr ""
 "  -T PROFIL\tinterroger le CA pour traiter la requête en utilisant le profil "
 "nommé ou le modèle\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Paramètres de la requête de signature :\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NOM\tdéfinit le nom du sujet demandé (par défaut: CN=<nom d'hôte>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\tdéfinit l'étendu de l'utilisation d'une clé OID demandé\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u USAGECLÉ\tconfigure la valeur requise d'usage de la clé\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NOM\tdéfinit le nom principal demandé\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D NOMDNS\tdéfinit le nom DNS demandé\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\tdéfinit l'adresse e-mail demandé\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A ADRESSE\tdéfinit l'adresse IP demandée\n"
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Options du Bus :\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tconnecte le service certmonger sur le bus système\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tconnecte le service certmonger sur le bus de session\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Autres options :\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tcommande à lancer avant de sauvegarder le certificat\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tcommande à lancer après avoir sauvegardé le certificat\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\trapporte tous les détails des erreurs\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Utilisation : %s start-tracking [options]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Si vous modifiez une requête existante :\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NOM\tnom d'une demande de suivi existante\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Si les clés sont chiffrées :\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NOM\tnom à donner à la demande de suivi\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 "* Paramètres de la requête de signature au moment du renouvellement :\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\toutrepasse la requête d'utilisation d'une clé OID étendue\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NOM\toutrepasse le nom principal demandé\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D NOMDNS\toutrepasse le nom DNS demandé\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\toutrepasse l'adresse e-mail demandée\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A ADRESSE\toutrepasse l'adresse IP demandée\n"
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Utilisation : %s stop-tracking [options]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* En identifiant la demande :\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NOM\tnom pour suivre la demande\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Utilisation : %s resubmit [options]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FICHIER\tfichier PEM pour le certificat\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nouvelle valeur du paramètre pour la demande de signature :\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NOM\tnouveau nom à donner à la demande de suivi\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 "  -c AC\t\tutilise l'autorité de certification spécifié plutôt que l'actuel\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Utilisation : %s list [options]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Options générales :\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c AC\tliste seulement les requêtes et les certificats associés à une "
 "autorité de certification\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tliste seulement l'information des demandes en attente\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tliste seulement l'information des certificats suivis\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Si vous sélectionnez une requête spécifique : \n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR\tn'afficher que les requêtes et certificats utilisant cette base de "
 "données NSS\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAME\tn'afficher que les requêtes et certificats utilisant ce pseudo\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FILE\tn'afficher que les requêtes et certificats stockés dans ce "
 "fichier PEM\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tconnecte le service certmonger sur le bus système\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tconnecte le service certmonger sur le bus de session\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Utilisation : %s list-cas [options]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 "  -c AC\tliste seulement les informations à propos de l'autorité de "
 "certification avec ce nom\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Utilisation : %s request [options]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+"  -c AC\tliste seulement les informations à propos de l'autorité de "
+"certification avec ce nom\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s : commande inconnue\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "L'option -t ne peut pas être utilisée avec l'option -K.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "L'option -k ne peut pas être utilisée avec l'option -K.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "L'option -K ne peut pas être utilisée avec les options -k ni -t.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 "Impossible de déterminer le nom principal pour la signature demandée.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 "Impossible de déterminer l'emplacement du serveur d'autorité de "
 "certification XMLRPC.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -895,7 +965,7 @@ msgstr ""
 "Erreur de mise en place du ccache pour le service « hôte » sur le client "
 "utilisant le jeu declés par défaut : %s.\n"
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
@@ -903,7 +973,7 @@ msgstr ""
 "Erreur de mise en place du ccache pour « %s » sur le client en utilisant le "
 "jeu de clés par défaut : %s.\n"
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -912,31 +982,29 @@ msgstr ""
 "Erreur de mise en place du ccache pour le service « hôte » en utilisant le "
 "jeu de clés « %s » : %s.\n"
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 "Erreur de mise en place du ccache pour « %s » sur le client en utilisant le "
 "jeu de  clés « %s » : %s.\n"
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "Erreur lors de la configuration de XMLRPC sur le client.\n"
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr ""
-"Impossible de déterminer l'emplacement du serveur d'autorité de "
-"certification XMLRPC.\n"
+msgstr "Impossible de déterminer l'emplacement du serveur LDAP IPA.\n"
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
-"Impossible de déterminer l'emplacement du serveur d'autorité de "
-"certification XMLRPC.\n"
+"Impossible de déterminer le DN de base des informations de domaine sur le "
+"serveur IPA.\n"
 
 #: src/main.c:120
 #, c-format
@@ -979,7 +1047,7 @@ msgstr "\t-p FICHIER     écrire le PID du service dans un fichier\n"
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         impose le mode FIPS à NSS\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Une erreur interne s'est produite."
 
@@ -992,26 +1060,28 @@ msgstr "Aucune correspondance trouvées.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Il existe déjà une autorité de certification avec le nom « %s »."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Type de stockage de certificat non spécifié."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Le type de certificat « %s » n'est pas pris en charge."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "L'emplacement « %s » doit être un chemin absolu."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Emplacement de stockage de certificat non spécifié."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -1020,17 +1090,19 @@ msgstr ""
 "L'emplacement parent de « %s » n'est pas accessible du fait de permissions "
 "insuffisantes."
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "L'emplacement principal « %s » doit être un répertoire valide."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "L'emplacement « %s » doit être un fichier."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
@@ -1038,80 +1110,81 @@ msgstr ""
 "L'emplacement « %s » n'est pas accessible du fait de permissions "
 "insuffisantes."
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "L'emplacement « %s » doit être un répertoire."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Nom du certificat non spécifié."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Il existe déjà une demande avec le nom « %s »."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr "Le certificat est déjà utilisé par une requête avec le nom « %s »."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Stockage de clés de type « %s » n'est pas pris en charge."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "Emplacement de stockage de clé non spécifié."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Nom de la clé non spécifié."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr "La clé est déjà utilisé par une requête avec le nom « %s »."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Absence de prise en charge des clés de type « %s »."
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Aucune autorité de certification."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "L'autorité de certification « %s » non connue."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Paramètre inconnu ou type de valeur incorrecte."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr "Erreur lors de l'analyse des arguments."
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr "Nom de propriété inconnu."
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 "Accès insuffisant. Merci de recommencer l'opération en tant que root.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Merci de vérifier que le service certmonger a été démarré.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
 "Merci de vérifier que le service certmonger est en cours d'exécution.\n"
diff --git a/po/ga.po b/po/ga.po
index 5d39d81..e6cb66e 100644
--- a/po/ga.po
+++ b/po/ga.po
@@ -1,28 +1,30 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Irish (http://www.transifex.com/projects/p/certmonger/language/ga/)\n"
+"Language-Team: Irish (http://www.transifex.com/projects/p/certmonger/"
+"language/ga/)\n"
+"Language: ga\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: ga\n"
-"Plural-Forms: nplurals=5; plural=(n==1 ? 0 : n==2 ? 1 : n<7 ? 2 : n<11 ? 3 : 4);\n"
+"Plural-Forms: nplurals=5; plural=(n==1 ? 0 : n==2 ? 1 : n<7 ? 2 : n<11 ? 3 : "
+"4);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/gl.po b/po/gl.po
index 2f63b4c..2e91580 100644
--- a/po/gl.po
+++ b/po/gl.po
@@ -1,28 +1,29 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Galician (http://www.transifex.com/projects/p/certmonger/language/gl/)\n"
+"Language-Team: Galician (http://www.transifex.com/projects/p/certmonger/"
+"language/gl/)\n"
+"Language: gl\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: gl\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/gu.po b/po/gu.po
index 3b13644..63d85ae 100644
--- a/po/gu.po
+++ b/po/gu.po
@@ -1,29 +1,30 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 # sweta <swkothar@redhat.com>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Gujarati (http://www.transifex.com/projects/p/certmonger/language/gu/)\n"
+"Language-Team: Gujarati (http://www.transifex.com/projects/p/certmonger/"
+"language/gu/)\n"
+"Language: gu\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: gu\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "CA નાં યજમાનનામને નક્કી કરવાનું અસમર્થ.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +36,9 @@ msgstr "XMLRPC માટે સુયોજિત કરતી વખતે ભ�
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr "DBus ને જોડતી વખતે ભૂલ.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "મહેરબાની કરીને ખાતરી કરો કે સંદેશા બસ (D-Bus) સેવા ચાલી રહી છે.\n"
@@ -169,700 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "નામ \"%s\" સાથે CA મળ્યુ નથી.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tસ્થિતિ: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tવિષય: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "અજ્ઞાત"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\tઇમેલ: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tટ્રેક: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "જરૂરી દલીલો:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN કિંમત\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "વૈકલ્પિક દલીલો:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* બસ વિકલ્પો:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Usage: %s list [options]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* સામાન્ય વિકલ્પો:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Usage: %s list [options]\n"
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -908,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "આંતરિક ભૂલ ઉદ્ભવી."
 
@@ -921,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "પ્રમાણપત્ર સંગ્રહ પ્રકાર સ્પષ્ટ થયેલ નથી."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "પ્રમાણપત્ર સંગ્રહ પ્રકાર \"%s\" આધારભૂત નથી."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "પ્રમાણપત્ર સંગ્રહ સ્થાન સ્પષ્ટ થયેલ નથી."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "સ્થાન \"%s\" ફાઇલ હોવી જ જોઇએ."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "સ્થાન \"%s\" ડિરેક્ટરી હોવી જ જોઇએ."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "પ્રમાણપત્ર ઉપનામ સ્પષ્ટ થયેલ નથી."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "કી સંગ્રહ પ્રકાર \"%s\" આધારભૂત નથી."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "કી સંગ્રહ સ્થાન સ્પષ્ટ થયેલ નથી."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "કી ઉપનામ સ્પષ્ટ થયેલ નથી."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/he.po b/po/he.po
index 1d29b3e..0b15fb9 100644
--- a/po/he.po
+++ b/po/he.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Hebrew (http://www.transifex.com/projects/p/fedora/language/"
-"he/)\n"
+"Language-Team: Hebrew (http://www.transifex.com/projects/p/certmonger/"
+"language/he/)\n"
 "Language: he\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/hi.po b/po/hi.po
index 4582cef..5884285 100644
--- a/po/hi.po
+++ b/po/hi.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Hindi (http://www.transifex.com/projects/p/fedora/language/"
-"hi/)\n"
+"Language-Team: Hindi (http://www.transifex.com/projects/p/certmonger/"
+"language/hi/)\n"
 "Language: hi\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/hr.po b/po/hr.po
index 269a265..98b2974 100644
--- a/po/hr.po
+++ b/po/hr.po
@@ -7,11 +7,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Croatian (http://www.transifex.com/projects/p/fedora/language/"
-"hr/)\n"
+"Language-Team: Croatian (http://www.transifex.com/projects/p/certmonger/"
+"language/hr/)\n"
 "Language: hr\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/hr_HR.po b/po/hr_HR.po
index 3209edb..5300326 100644
--- a/po/hr_HR.po
+++ b/po/hr_HR.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Croatian (Croatia) (http://www.transifex.com/projects/p/"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/hu.po b/po/hu.po
index 36fda35..ee2c191 100644
--- a/po/hu.po
+++ b/po/hu.po
@@ -9,10 +9,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Hungarian (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Hungarian (http://www.transifex.com/projects/p/certmonger/"
 "language/hu/)\n"
 "Language: hu\n"
 "MIME-Version: 1.0\n"
@@ -20,12 +20,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "CA hosztnevének meghatározása meghiúsult.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Bejelentkezési kérés olvasása meghiúsult.\n"
@@ -37,9 +37,9 @@ msgstr "Hiba történt a XMLRPC-re történő beállításkor\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Hiba a szerver válasz értelmezésében.\n"
@@ -72,9 +72,9 @@ msgstr ""
 "Nincs profil / sablon megadva (-T), és nincs ismert alapértelmezett sem.\n"
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Hiba történt a XMLRPC-re történő beállításkor\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -142,7 +142,7 @@ msgstr "Elfogyott a rendelkezésre álló memória.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Hiba a DBus-hoz való csatlakozáskor.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Kérem ellenőrizze, hogy az üzenet busz (D-Bus) szolgáltatás működik.\n"
@@ -179,75 +179,75 @@ msgstr "Hiba érkezett egy helyi %s szolgáltatástól.\n"
 msgid "No response received from %s service.\n"
 msgstr "Nincs válasz a következő szolgáltatástól: %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Hiba történt a Kerberos modul beállításakor: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Felismerhetetlen kulcshasználat \"%s\".\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Nem értelmezhető OID \"%s\".\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Hiba a Kerberos megbízói név értelmezésekor \"%s\": %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Hiba a Kerberos megbízói név visszafordításakor \"%s\": %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: az opcióhoz szükséges egy paraméter is -- '%c'\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: érvénytelen opció --'%c'\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "HIba: kihasználatlan extra paraméter \"%s\".\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Hiba: használaton kívüli extra paraméterek is alkalmazásra kerültek.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Adatbázis helye vagy elnevezése egymás nélkül vannak meghatározva.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Adatbázis könyvtára és az aláírás fájl meghatározva.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -255,12 +255,12 @@ msgstr ""
 "Sem az adatbázis könyvtára és az elnevezése, vagy az aláírás fájl nincs "
 "meghatározva.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "A kulcs és az aláírás nem menthető el egy ugyanazon fájlba.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -269,39 +269,39 @@ msgstr ""
 "Az IPA backend-nek szükséges a -K opció (megbízói név) ha az -N opció (tárgy "
 "név) alkalmazásban van.\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Nincs elérhető CA \"%s\" néven.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Hiba a paraméterek kérésekor.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Új aláírási kérelem \"%s\" hozzáadva.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Új aláírási kérelem nem adható hozzá.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Új nyomkövetési kérés \"%s\" hozzáadva.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Új nyomkövetési kérés nem adható hozzá.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -310,633 +310,703 @@ msgstr ""
 "Sem az ID vagy adatbázis könyvtára és az elnevezése, vagy az aláírás fájl "
 "sincsen meghatározva.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "\"%s\" kérés módosult.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "\"%s\" kérés nem módosítható.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Nem található kérés a megadott elnevezéssel.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Olyan kérés nem található ami egyezne a paraméterekkel.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "\"%s\" kérés eltávolítva.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "\"%s\" kérés nem távolítható el.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "\"%s\" módosításakor hiba lépett fel.\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "\"%s\" újraküldése ide: \"%s\".\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Újraküldés: \"%s\".\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Nem sikerült \"%s\" beküldése ide: \"%s\".\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "\"%s\" beküldése sikertelen.\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "A nyomonkövetett kérések és aláírások száma: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID kérése: '%s':\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>status: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-error: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>beragadt: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tkulcspár tároló: típusa=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "NINCS"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",helye='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",elnevezés='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",jegy='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfájl='%s'"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\ttanusítvány: típusa=%s,helye='%s'"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>CA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>issuer: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>subject: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>lejárati idő: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "ismeretlen"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>email: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>dns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>megbízó neve: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tkulcshasználat: %s\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>eku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tpre-mentés parancs: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tpost-mentés parancs: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>track: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>automatikus "
 "megújítás: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-típus: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>segítő-helye: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>következő "
 "sorozatszám: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 "<span class=\"whitespace other\" title=\"Tab\">»</span>ismert kibocsátó "
 "nevek:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - kliens tanusítvány felvevő eszköz\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Használata: %s kérés [opciók]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Szükséges paraméterek:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 "* Ha egy NSS adatbázist használ a tárolóhoz:\n"
 "\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 "  -d DIR<span class=\"whitespace other\" title=\"Tab\">»</span>NSS adatbázis "
 "a kulcshoz és a tanusítványhoz\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAME<span class=\"whitespace other\" title=\"Tab\">»</span>elnevezés az "
 "NSS-alapú tárolóhoz (csak -d opcióval érvényes)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAME\topcionális token név az NSS-alapú tárolókhoz (csak a -d opcióval "
 "érvényes)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Ha a fájlokat a tárolásra használja:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE\tPEM fájl a privát kulcshoz\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE\tPEM fájl az aláíráshoz (csak a -k opcióval érvényes)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Ha a kulcsok titkosításra kerülnek:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\tfájl ami a titkosító PIN-t tartalmazza\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN értéke\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Opcionális paraméterek:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Aláírás ezeket a beállításokat kezeli:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME\telnevezés amelyet hozzárendelhetünk az igényléshez\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g SIZE\taz előállítandó kulcs mérete ha egy már nem lenne a helyén\n"
 "\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tmegkísérlés a bizonyítvány megújítására ha a lejárati idő közeledik "
 "(alapértelmezett)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tne kísérelje meg a bizonyítvány megújítását ha a lejárati idő "
 "közeledik\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 "  -c CA\t\tinkább alkalmazza a megadott CA mint az alapértelmezettet\n"
 "\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 "  -T PROFILE\task CA számítás a kért felhasznált profil név vagy sablon\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Paraméterek az aláírási igényléshez:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAME \tigényelt tárgy nevének beállítása (alapértelmezett: "
 "CN=<hosztnév>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U EXTUSAGE\tigényelt kibővített kulcs használatának beállítása OID\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\tbeállítja a kért kulcshasználati értéket\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "-K NAME\tigényelt elsődleges név beállítása \n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "- D DNSNAME\tigényelt DNS név beállítása\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "-E MAIL \tigényelt email cím beállítása\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Adatcsatorna opciók:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "-S\t\tconnect certmonger szolgáltatásnál a rendszer buszon \n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "-s\t\tconnect certmonger szolgáltatásnál a szál vezérélésnél \n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Egyéb opciók:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "-B\tcommand futtatás előtt a tanúsítványt menti \n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "-C\tcommand futtatás után a tanúsítványt menti \n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tjelentse az összes hibarészletet\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Használata: %s nyomon követés [opciók]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Ha módosítanak egy létező kérést:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME\tnickname of an existing tracking request\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Ha a kulcsok titkosítottak:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME\telnevezés a nyomonkövetési kéréshez\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 "* Paraméterek az aláírási kéréshez megújításkor:\n"
 "\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\tfelülírja a kért kibővített kulcs használat OID-jét\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 "  -K NAME\tfelülírja a kért elsődleges nevet\n"
 "\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\tfelülírja a kért DNS nevet\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 "  -E EMAIL\tfelülírja a kért email címet\n"
 "\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Használata: %s stop-tracking [opciók]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Kérés azonosítója alapján:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME\telnevezés a nyomonkövetési kéréshez\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Használata: %s újraküldése [opciók]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE\tPEM fájl az aláírásért\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Új paraméter értékek az aláírási kérelemhez:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\túj név megadása a nyomonkövetési kéréshez\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\talkalmazza a megadott CA-t jelenlegi helyett \n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Használata: %s listázása [opciók]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Általános opciók:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\tcsak azokat a kéréseket és bizonytványokat listázza amelyek ezzel a "
 "CA-val vannak kapcsolatban\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tcsak a kiemelkedő kérésekről szóló információkat listázza\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 "  -t\tcsak a nyomonkövetett bizonytványok adatait listázza\n"
 "\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Ha kiválaszt egy specifikus igénylést:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR\tcsak olyan igényléseket és bizonyítványokat listáz amelyek ezt az "
 "NSS adatbázist használják\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAME\tcsak olyan igényléseket és bizonyítványokat listáz amelyek ezt az "
 "elnevezést használják\n"
 "\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FILE\tcsak olyan igényléseket és bizonyítványokat listáz amelyek "
 "tárolásra kerültek ebben a PEM fájlban\n"
 "\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tkapcsolja össze a certmonger szolgáltatást a rendszer bus-al\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 "  -s\tkapcsolja össze a certmonger szolgáltatást a session bus-al\n"
 "\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Alkalmazás: %s list-cas [opciók]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 "  -c CA\tcsak az ezzel a névvel rendelkező CA tanúsítvány információit "
 "listázza\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Használata: %s kérés [opciók]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+"  -c CA\tcsak az ezzel a névvel rendelkező CA tanúsítvány információit "
+"listázza\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 "%s: ismeretlen parancs\n"
 "\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "A -t opció nem használható a _K opcióval együtt.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "A -k opció nem használható a -K opcióval együtt.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "A -K opció nem használható a -k vagy a -t opcióval sem.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Meghatározhatatlan az elsődleges neve az aláírási igénylésnek.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Nem meghatározható a CA XMLRPC kiszolgáló helye.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Nem meghatározható a CA XMLRPC kiszolgáló helye.\n"
+msgstr ""
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "Nem meghatározható a CA XMLRPC kiszolgáló helye.\n"
+msgstr ""
 
 #: src/main.c:120
 #, c-format
@@ -987,7 +1057,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         eröltesse az NSS-t FIPS módba\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Belső hiba történt."
 
@@ -1000,123 +1070,128 @@ msgstr "Nincs egyező bejegyzés.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Már szerepel egy CA ezzel a névvel: \"%s\"."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Bizonyítvány tároló típusa nem definiált."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "\"%s\" típusú bizonyítványtároló enm támogatott."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "A hely \"%s\" abszolút elérési útnak kell lennie."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Bizonyítványok tárolási helye nincs meghatározva."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "\"%s\" szülő könyvtárnak létező mappának kell lennie."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "\"%s\" egy fájlnak kell lennie."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "\"%s\" egy könyvtárnak kell lennie."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Bizonyítvány elnevezése nincs definiálva."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Már van egy igénylés ezzel a névvel: \"%s\"."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Tanúsítvány ugyanazt a helyet használja amit a becenévnél igényelt \"%s\"."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "\"%s\" kulcstároló típus nem támogatott."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "Kulcstároló helye nem definiált."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Kulcs elnevezés nem meghatározott."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr "Kulcs ugyanazt a helyet használja amit a becenévnél igényelt \"%s\"."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Nincs ilyen CA."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "\"%s\" nevű tanúsítvány hatóság nem ismert."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Ismeretlen paraméter, vagy rossz értéktípus."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 "Elégtelen hozzáférési jog. Kérem ismételje meg a műveletet "
 "rendszergazdaként.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Kérem ellenőrizze, hogy a certmonger szolgáltatás már elindult.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr "Kérem ellenőrizze, hogy a certmonger szolgáltatás még mindig fut.\n"
diff --git a/po/hy.po b/po/hy.po
index b11a297..dc6d5af 100644
--- a/po/hy.po
+++ b/po/hy.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Armenian (http://www.transifex.com/projects/p/fedora/language/"
-"hy/)\n"
+"Language-Team: Armenian (http://www.transifex.com/projects/p/certmonger/"
+"language/hy/)\n"
 "Language: hy\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ia.po b/po/ia.po
index 6dad098..43f5c70 100644
--- a/po/ia.po
+++ b/po/ia.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Interlingua (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Interlingua (http://www.transifex.com/projects/p/certmonger/"
 "language/ia/)\n"
 "Language: ia\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/id.po b/po/id.po
index afab14a..8bb626a 100644
--- a/po/id.po
+++ b/po/id.po
@@ -8,10 +8,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Indonesian (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Indonesian (http://www.transifex.com/projects/p/certmonger/"
 "language/id/)\n"
 "Language: id\n"
 "MIME-Version: 1.0\n"
@@ -19,12 +19,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "tidak dapat menentukan nama host dari CA.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Tidak dapat membaca tanda permintaan.\n"
@@ -36,9 +36,9 @@ msgstr "Setting kesalahan untuk XMLRPC\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "merespon pelayanan penguraian kesalahan.\n"
@@ -69,9 +69,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Setting kesalahan untuk XMLRPC\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -137,7 +137,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr "Kesalahan koneksi untuk ke DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -172,75 +172,75 @@ msgstr "Menerima respon eror dari lokal %s layanan.\n"
 msgid "No response received from %s service.\n"
 msgstr "Tidak menerima respon dari %s layanan.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Menginisialisasi Kesalahan Kerberos : %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Tidak dapat mengevaluasi OID\"%s\".\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kesalahan menguraikan nama utama Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kesalahan tanpa menguraikan nama utama Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Lokasi database atau nama panggilan khusus tanpa yang lain. \n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Direktori database dan sertifikat file kedua secara khusus.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -248,13 +248,13 @@ msgstr ""
 "Tidak ada dari direktori database dan nama panggilan atau sertifikat berkas "
 "khusus.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "Kunci dan sertifikat tidak dapat di simpan seluruhnya pada file yang sama.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -263,39 +263,39 @@ msgstr ""
 "IPA kembali memerlukan kegunaan dari pilihan -K (nama utama) di mana ketika "
 "pilihan -N (nama subjek) telah digunakan.\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Tidak ada CA dengan nama \"%s\"menemukan.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Pengaturan kesalahan permintaan beberapa argumen.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Menandai permintaan baru \"%s\" yang di tambah.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Menandai permintaan baru yang tidak dapat ditambahkan.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Permintaan pelacakan di tambahkan \"%s\"added.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Permintaan pelacakan tidak dapat di tambahkan.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -304,589 +304,657 @@ msgstr ""
 "ID kosong atau direktori database dan nama panggilan atau sertifikat berkas "
 "khusus.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Permintaan \"%s\" memodifikasi.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Permintaan \"%s\" tidak dapat dimodifikasi.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Tidak menemukan permintaan mengenai argumen yang cocok.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Permintaan \"%s\" menghapus.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Permintaan \"%s\" tidak dapat menghapus.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Modifikasi eror \"%s\".\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Pengajuan kembali \"%s\" to \"%s\".\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Pengajuan kembali \"%s\".\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Usaha eror untuk di ajukan \"%s\"untuk \"%s\".\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Usaha eror untuk di ajukan \"%s\".\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID de solicitud '%s':\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tstatus: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-error: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tstuck: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tissuer: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsubject: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\texpires: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "Tidak diketauhui"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\temail: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tprincipal name: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttrack: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renew: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "AC '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-type: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\thelper-location: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tnext-serial-number: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tknown-issuer-names:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - sertifikat pendaftaran pelanggan\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Pemakaian: %s request[options]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Argumentasi yang di butuhkan:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "*Jika menggunakan database NSS untuk menyimpan:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "-d DIR\tNSS database untuk kunci dan pemastian\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "-n NAME\tnickname untuk dasar penyimpanan NSS (hanya valid dengan -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "-t NAME\toptional tanda nama untuk dasar penyimpanan NSS (hanya valid dengan "
 "-d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "*Jika menggunakan berkas untuk penyimpanan:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "-k FILE\tPEM berkas untuk kunci privasi\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "-f FILE\tPEM berkas untuk sertifikat (hanya valid dengan -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "-p FILE\tfile yang memegang enkripsi suatu PIN\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Pilihan argumen-argumen:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Keadaan menangani sertifikat:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "-I NAME\tnickname untuk menandai sebuah permintaan\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "-g SIZE\tsize  sebuah kunci untuk menghasilkan jika salah satu telah tidak "
 "berada di dalam tempat\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "-r\t\tattempt untuk memperbarui sertifikat ketika mendekati akhir waktu "
 "(kegagalan)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "-R\t\tdon't usaha untuk memperbarui sertifikat ketika mendekati akhir waktu\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr " -c CA\t\tuse CA khusus lebih baik daripada kegagalan\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Beberapa parameter untuk menandai permintaan:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N NAME\tset permintaan nama subjek (kegagalan: CN=<hostname>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "-U EXTUSAGE\tset memperluas permintaan pemakaian kunci OID\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "-K NAME\tset permintaan nama utama\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "-D DNSNAME\tset permintaan nama DNS\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "-E EMAIL\tset permintaan alamat email\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Pilihan Bus:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "-S\t\tconnect untuk layanan pemastian dalam sistem bus\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "-s\t\tconnect untuk layanan pemastian pada pembahasan bus\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Pemakaian: %s start-tracking [options]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Jika memodifikasi permintaan yang ada:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "-i NAME\tnickname permintaan mengikuti jalan yang ada\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Jika kunci adalah enkripsi:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "-I NAME\tnickname untuk memberi mengikuti permintaan\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Pemakaian:  %s stop-tracking [options]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Dengan memperkenalkan permintaan:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "-i NAME\tnickname untuk mengikuti permintaan\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Pemakaian: %s resubmit [options]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "-f FILE\tPEM berkas untuk sertifikat\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Parameter baru bernilai untuk menandai permintaan:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "-I NAME\tnew nama panggilan untuk memberikan mengikuti permintaan\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "-c CA\t\tuse CA khusus lebih baik daripada saat ini\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Pemakaian:  %s list [options]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Pilihan umum:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "-c CA\tlist hanya permintaan dan pemastian kolega dengan CA ini\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "-r\tlist hanya informasi tentang permintaan terkemuka\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "-t\tlist hanya informasi tentang jalannya sertifikat\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "-S\tconnect untuk layanan pemastian pada sistem bus\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "-s\tconnect untuk layanan pemastian pada pembahasan bus\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Pemakaian: %s list-cas [options]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "-c CA\tlist hanya informasi tentang CA dengan nama ini\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Pemakaian: %s request[options]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "-c CA\tlist hanya informasi tentang CA dengan nama ini\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: tidak mengenali perintah\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Tidak dapat untuk menentukan nama utama untuk menandai permintaan.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Tidak dapat untuk menentukan lokasi dari penyedia CA XMLRPC.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Tidak dapat untuk menentukan lokasi dari penyedia CA XMLRPC.\n"
+msgstr ""
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "Tidak dapat untuk menentukan lokasi dari penyedia CA XMLRPC.\n"
+msgstr ""
 
 #: src/main.c:120
 #, c-format
@@ -929,7 +997,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Eror pada bagian dalam telah terjadi"
 
@@ -942,120 +1010,125 @@ msgstr "Tidak menemukan catatan masuk yang cocok.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Tipe penyimpanan sertifikat tidak khusus."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Tipe penyimpanan sertifikat \"%s\" tidak mendukung."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Lokasi \"%s\" harus analisa yang tepat."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Lokasi penyimpanan sertifikat tidak khusus."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "induk dari lokasi \"%s\" harus sebuah direktori yang valid."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Lokasi \"%s\" harus berupa berkas."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Lokasi \"%s\" harus berupa direktori."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "nama panggilan sertifikat tidak khusus."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Permintaan telah dilakukan dengan nama panggilan \"%s\"."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Tipe kunci penyimpanan \"%s\" tidak mendukung."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "lokasi kunci penyimpanan tidak khusus."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "kunci nama panggilan tidak khusus."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "CA tidak serupa."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Wewenang sertifikat \"%s\" tidak diketahui."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Tidak mengenal parameter atau salah tipe nilai."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ilo.po b/po/ilo.po
index 78d7802..b75f566 100644
--- a/po/ilo.po
+++ b/po/ilo.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Iloko (http://www.transifex.com/projects/p/fedora/language/"
-"ilo/)\n"
+"Language-Team: Iloko (http://www.transifex.com/projects/p/certmonger/"
+"language/ilo/)\n"
 "Language: ilo\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/is.po b/po/is.po
index c898837..9431379 100644
--- a/po/is.po
+++ b/po/is.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Icelandic (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Icelandic (http://www.transifex.com/projects/p/certmonger/"
 "language/is/)\n"
 "Language: is\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/it.po b/po/it.po
index 1445c97..c308dbf 100644
--- a/po/it.po
+++ b/po/it.po
@@ -9,23 +9,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Italian (http://www.transifex.com/projects/p/fedora/language/"
-"it/)\n"
+"Language-Team: Italian (http://www.transifex.com/projects/p/certmonger/"
+"language/it/)\n"
 "Language: it\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Impossibile determinare l'hostname di CA.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Impossibile leggere la richiesta di firma.\n"
@@ -37,9 +37,9 @@ msgstr "Errore nell'impostazione di XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Errore di analisi della risposta del server.\n"
@@ -70,9 +70,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Errore nell'impostazione di XMLRPC.\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -139,7 +139,7 @@ msgstr "Memoria esaurita.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Errore nella connessione a DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Verificare che il servizio bus messaggi (D-bus) è in esecuzione.\n"
@@ -174,75 +174,75 @@ msgstr "Ricevuta una risposta di errore dal servizio locale %s.\n"
 msgid "No response received from %s service.\n"
 msgstr "Nessuna risposta ricevuta dal servizio %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Errore nell'inizializzazione della libreria Kerberos: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Impossibile valutare OID: \"%s\".\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Errore nell'analisi del nome principale Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Errore non analizzato nome principale Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: l'opzione richiede un argomento -- '%c'\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: opzione non valida -- '%c'\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Errore: argomento extra \"%s\" non usato.\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Errore: argomenti extra non usati dove forniti.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Posizione database o nickname specificato senza ordine.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Cartella database e file certificato specificati contemporaneamente.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -250,14 +250,14 @@ msgstr ""
 "Non è stata specificata nessuna cartella di database e nickname o file "
 "certificato.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "La chiave ed il certificato non possono essere salvati entrambi nello stesso "
 "file.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -266,39 +266,39 @@ msgstr ""
 "Il backend IPA richiede l'uso dell'opzione -K (nome principale) quando si "
 "usa l'opzione -N (nome soggetto).\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Non è stato trovato nessun CA con nome \"%s\".\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Errore nell'impostazione degli argomenti richiesti.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Aggiunta una nuova richiesta segnata \"%s\".\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "La nuova richiesta segnata non può essere aggiunta.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Aggiunta una nuova richiesta di tracking \"%s\".\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "La nuova richiesta di tracking non può essere aggiunta.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -307,600 +307,668 @@ msgstr ""
 "Non è stato specificato nessuno tra l'ID oppure la cartella di database ed "
 "il nickname oppure il certificato.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Richiesta \"%s\" modificata.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "La richiesta \"%s\" non può essere modificata.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Non è stata trovata nessuna richiesta con il nickname specificato.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Non è stata trovata nessuna richiesta con argomenti corrispondenti.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Richiesta \"%s\" rimossa.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "La richiesta \"%s\" non può essere rimossa.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Errore nella modifica di \"%s\".\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Re-invio di \"%s\" a \"%s\".\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Re-invio di \"%s\".\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Errore nel tentativo di sottomettere \"%s\" a \"%s\".\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Errore nel tentativo di sottomettere \"%s\".\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Il numero di certificati e di richieste sotto tracciamento: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID richiesto '%s':\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tstato: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\terrore-ca: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tstuck: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tcoppia chiavi di storage: tipo=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "NESSUNO"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",posizione='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",nickname='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfile='%s'"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertificato: tipo=%s,posizione='%s'"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\temittente: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsoggetto: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tscadenza: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "sconosciuto"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\temail:"
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tnome principale:"
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttraccia: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renew: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttipo-ca: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tposizione-aiutante: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tprossimo-numero-serie: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnomi-emittente-noti:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - strumento di registrazione certificato client\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Utilizzo: %s request [opzioni]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Argomenti richiesti:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Se si utilizza un database NSS per lo storage:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tDatabase NSS per chiave e certificato\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NOME\tnickname per gli storage basati su NSS (valido solo con -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NOME\tnome token opzionale per storage basato su NSS (valido solo con -"
 "d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Se si utilizzano file per lo storage:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE\tfile PEM per la chiave privata\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE\tfile PEM per il certificato (valido solo con -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Se le chiavi devono essere cifrate:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\til file che contiene il PIN di cifratura\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tvalore PIN\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Argomenti aggiuntivi:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Impostazioni di gestione certificato:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NOME\tnickname da assegnare alla richiesta\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g DIM\tdimensione della chiave da generare se non ne è già presente una\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\ttenta di rinnovare il certificato quando si avvicina la scadenza "
 "(predefinito)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -r\t\tnon tentare di rinnovare il certificato quando si avvicina la "
 "scadenza\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tusa il CA specificato piuttosto che il predefinito\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parametri per la richiesta segnata:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N NOME\timposta il nome del soggetto (predefinito: CN=<hostname>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U USOEXT\timposta l'utilizzo OID della chiave estesa richiesta\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NOME\timposta il nome principale richiesto\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D NOMEDNS\timposta il nome DNS richiesto\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\timposta l'indirizzo email richiesto\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Opzioni bus:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tconnessione al servizio certmonger sul bus di sistema\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -S\t\tconnessione al servizio certmonger sul bus di sessione\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Altre opzioni:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\triporta tutti i dettagli degli errori\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Utilizzo: %s start-tracking [opzioni]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Se si modifica una richiesta preesistente:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NOME\tnickname di una richiesta di tracking preesistente\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Se le chiavi sono cifrate:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NOME\tnickname da dare alla richiesta di tracking\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parametri per la richiesta segnante al momento del rinnovo:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U USOEXT\tSovrascrive l'utilizzo OID della chiave estesa richiesta\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NOME\tsovrascrive il nome principale richiesto\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D NOMEDNS\tsovrascrive il nome DNS richiesto\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\tsovrascrive l'indirizzo email richiesto\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Utilizzo: %s stop-tracking [opzioni]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Per richieste di identificazione:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NOME\tnickname di una richiesta di tracking\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Utilizzo: %s resubmit [opzioni]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE\tfile PEM per il certificato\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nuovi valori di parametro per le richieste segnanti:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\tnuovo nickname da dare alla richiesta di tracking\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tusa il CA specificato piuttosto che l'attuale\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Utilizzo: %s list [opzioni]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Opzioni generali:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\telenca solo le richieste ed i certificati associati a questo CA\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\telenca solo le informazioni sulle richieste eccezionali\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\telenca solo le informazioni sui certificati tracciati\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Se si seleziona una richiesta specifica:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d DIR\telenca solo le richieste ed i certificati che usano questo "
 "database NSS\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NOME\telenca solo le richieste ed i certificati che usano questo "
 "nickname\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FILE\telenca solo le richieste ed i certificati immagazzinati in questo "
 "file PEM\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tconnettersi al servizio certmonger sul bus di sistema\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tconnettersi al servizio certmonger sul bus di sessione\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Utilizzo: %s list-cas [opzioni]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\telenca solo informazioni sulla CA con questo nome\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Utilizzo: %s request [opzioni]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "  -c CA\telenca solo informazioni sulla CA con questo nome\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: comando non riconosciuto\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "L'opzione -t non può essere usata con l'opzione -K .\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "L'opzione -k non può essere usata con l'opzione -K .\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 "L'opzione -K non può essere usata ne con l'opzione -k che con l'opzione -"
 "t .\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 "Impossibile determinare il nome principale per la richiesta di firma.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Impossibile determinare la posizione del server XMLRPC di CA.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Impossibile determinare la posizione del server XMLRPC di CA.\n"
+msgstr ""
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "Impossibile determinare la posizione del server XMLRPC di CA.\n"
+msgstr ""
 
 #: src/main.c:120
 #, c-format
@@ -943,7 +1011,7 @@ msgstr "\t-p FILE    scrive il PID di servizio su file\n"
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Si è verificato un errore interno."
 
@@ -956,65 +1024,70 @@ msgstr "Non è stata trovata nessuna voce corrispondente.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "E' già presente una CA con il nickname \"%s\"."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Tipo di storage di certificato non specificato."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Tipo di storage di certificato \"%s\" non supportato."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "La posizione \"%s\" deve essere un percorso assoluto."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "La posizione di storage di certificato non è specificata."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 "La directory superiore della posizione \"%s\" deve essere una cartella "
 "valida."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "La posizione \"%s\" deve essere un file."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "La posizione \"%s\" deve essere una cartella."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Nickname del certificato non specificato."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "E' già presente una richiesta con il nickname \"%s\"."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
@@ -1022,60 +1095,60 @@ msgstr ""
 "Il certificato con questa posizione è già usato dalla richiesta con il "
 "nickname \"%s\"."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Tipo chiave di storage \"%s\" non supportata."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "La posizione di storage di chiave non è specificata."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Nickname di chiave non specificata."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "La chiave con questa posizione è già usata dalla richiesta con il nickname "
 "\"%s\"."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Nessuna CA."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Autorità di certificato \"%s\" sconosciuta."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Parametro non riconosciuto o tipo di valore errato."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/it_IT.po b/po/it_IT.po
index a0797ce..f5ee1cb 100644
--- a/po/it_IT.po
+++ b/po/it_IT.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Italian (Italy) (http://www.transifex.com/projects/p/fedora/"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ja.po b/po/ja.po
index 8aa094a..021fcfd 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -1,34 +1,35 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 # Hajime Taira <htaira@redhat.com>, 2011-2012
 # noriko <noriko@fedoraproject.org>, 2012
 # noriko <noriko@fedoraproject.org>, 2012
 # Tomoyuki KATO <tomo@dream.daynight.jp>, 2011-2014
-# 高一人参 @欠陥遺伝子 <www.carrotsoft@gmail.com>, 2011
-# 高一人参 @欠陥遺伝子 <www.carrotsoft@gmail.com>, 2011
+# carrotsoft <www.carrotsoft@gmail.com>, 2011
+# carrotsoft <www.carrotsoft@gmail.com>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Japanese (http://www.transifex.com/projects/p/certmonger/language/ja/)\n"
+"Language-Team: Japanese (http://www.transifex.com/projects/p/certmonger/"
+"language/ja/)\n"
+"Language: ja\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: ja\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "CA のホスト名を解釈できません。\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "署名リクエストを読むことができません。\n"
@@ -40,9 +41,9 @@ msgstr "XMLRPC の設定中にエラーが発生しました。\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "サーバーの応答を解析中にエラーが発生しました。\n"
@@ -60,17 +61,22 @@ msgstr ""
 #: src/dogtag.c:362
 #, c-format
 msgid "No end-entity URL (-E) given, and no default known.\n"
-msgstr "エンド・エンティティ URL (-E) が指定されていません。また、デフォルトが不明です。\n"
+msgstr ""
+"エンド・エンティティ URL (-E) が指定されていません。また、デフォルトが不明で"
+"す。\n"
 
 #: src/dogtag.c:366
 #, c-format
 msgid "No agent URL (-A) given, and no default known.\n"
-msgstr "エージェント URL (-A) が指定されていません。また、デフォルトが不明です。\n"
+msgstr ""
+"エージェント URL (-A) が指定されていません。また、デフォルトが不明です。\n"
 
 #: src/dogtag.c:370
 #, c-format
 msgid "No profile/template (-T) given, and no default known.\n"
-msgstr "プロファイル/テンプレート (-T) が指定されていません。また、デフォルトが不明です。\n"
+msgstr ""
+"プロファイル/テンプレート (-T) が指定されていません。また、デフォルトが不明で"
+"す。\n"
 
 #: src/dogtag.c:378
 #, c-format
@@ -100,14 +106,17 @@ msgstr "内部エラー: \"%s?%s\" への応答がありません。\n"
 #: src/getcert.c:91
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
-msgstr "パス \"%s\" が絶対パスではありません。代わりに \"%s\" で試行しています。\n"
+msgstr ""
+"パス \"%s\" が絶対パスではありません。代わりに \"%s\" で試行しています。\n"
 
 #: src/getcert.c:96
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
-msgstr "パス  \"%s\" が絶対パスではありません。また、カレントディレクトリーの名前を判断する際にエラーが発生しました。\n"
+msgstr ""
+"パス  \"%s\" が絶対パスではありません。また、カレントディレクトリーの名前を判"
+"断する際にエラーが発生しました。\n"
 
 #: src/getcert.c:118
 #, c-format
@@ -137,9 +146,11 @@ msgstr "メモリーが不足\n"
 #: src/getcert.c:273
 #, c-format
 msgid "Error connecting to DBus.\n"
-msgstr "D-Bus へ接続中にエラーが発生しました。\n\n"
+msgstr ""
+"D-Bus へ接続中にエラーが発生しました。\n"
+"\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "message bus (D-Bus) サービスが稼働中であることを確認してください。\n"
@@ -147,7 +158,9 @@ msgstr "message bus (D-Bus) サービスが稼働中であることを確認し�
 #: src/getcert.c:281
 #, c-format
 msgid "Error creating DBus request message.\n"
-msgstr "D-Bus 要求メッセージを作成中にエラーが発生しました。\n\n"
+msgstr ""
+"D-Bus 要求メッセージを作成中にエラーが発生しました。\n"
+"\n"
 
 #: src/getcert.c:323
 #, c-format
@@ -174,700 +187,807 @@ msgstr "ローカルの %s サービスからエラー応答を受け取りま�
 msgid "No response received from %s service.\n"
 msgstr "%s サービスから応答が受け取れません。\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Kerberos ライブラリーを初期化中にエラーが発生しました: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "\"%s\" キーの生成はサポートされません。\n"
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr "利用できるキー形式は以下のとおりです:"
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "認識できないキー使用法 \"%s\"。\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "OID \"%s\" を評価することができません。\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kerberos のプリンシパル名 \"%s\" をパース中にエラー: %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Kerberos のプリンシパル名 \"%s\" をアンパース中にエラー: %s\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: オプションには引数が必要です。-- '%c'\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: 無効なオプション -- '%c'\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "エラー: 使用されない余計な引数 \"%s\"。\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "エラー:余分なパラメーターが指定されました。\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
-msgstr "データベースの場所もしくはニックネームのどちらかが指定されていません。\n"
+msgstr ""
+"データベースの場所もしくはニックネームのどちらかが指定されていません。\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "データベースディレクトリーと証明書ファイルの両方が指定されています。\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
-msgstr "データベースディレクトリーとニックネーム、もしくは証明書ファイルの指定されていません。\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
+msgstr ""
+"データベースディレクトリーとニックネーム、もしくは証明書ファイルの指定されて"
+"いません。\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "キーと証明書の両方を同じファイルに保存することができません。\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
-msgstr "IPA バックエンドは -N オプション(サブジェクト名) を使用した場合、-K オプション(プリンシパル名)を必要とします。\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
+msgstr ""
+"IPA バックエンドは -N オプション(サブジェクト名) を使用した場合、-K オプショ"
+"ン(プリンシパル名)を必要とします。\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "\"%s\" という名前の CA が見つかりません。\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
-msgstr "リクエストの引数を設定中にエラーが発生しました。\n\n"
+msgstr ""
+"リクエストの引数を設定中にエラーが発生しました。\n"
+"\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "新しい署名リクエスト \"%s\" が追加されました。\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "新しい署名リクエストの追加ができません。\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "新しい追跡リクエスト \"%s\" が追加されました。\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "新しい追跡リクエストの追加ができません。\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
-msgstr "IDまたはデータベースディレクトリー、もしくはニックネーム、証明書ファイルの指定されていません。\n"
+msgstr ""
+"IDまたはデータベースディレクトリー、もしくはニックネーム、証明書ファイルの指"
+"定されていません。\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "リクエスト \"%s\" は変更されました。\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "リクエスト \"%s\" は変更できません。\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "指定されたニックネームを持つリクエストが見つかりませんでした。\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "引数に該当したリクエストが見つかりません。\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "リクエスト \"%s\" は削除されました。\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "リクエスト \"%s\" は削除できません。\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
-msgstr "\"%s\" を変更中にエラーが発生しました。\n\n"
+msgstr ""
+"\"%s\" を変更中にエラーが発生しました。\n"
+"\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "\"%s\" を \"%s\" へ再送中です。\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "\"%s\" を再送中です。\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
-msgstr "\"%s\" を \"%s\" へ送信中にエラーが発生しました。\n\n"
+msgstr ""
+"\"%s\" を \"%s\" へ送信中にエラーが発生しました。\n"
+"\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
-msgstr "\"%s\" を送信中にエラーが発生しました。\n\n"
+msgstr ""
+"\"%s\" を送信中にエラーが発生しました。\n"
+"\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "追跡されている証明書とリクエストの数：%d\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "リクエスト ID '%s':\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\t状態: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tCAエラー: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tスタック: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tキーペアストレージ: type=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "なし"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",location='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",nickname='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfile='%s'"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\t証明書: type=%s,location='%s'"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\t発行者: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tサブジェクト: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\t有効期限: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "不明"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\tEメール: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tDNS: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tプリンシパル名: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tキー使用法: %s\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\t拡張キー使用法: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\t保存前コマンド: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\t保存後コマンド: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\t追跡: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\t自動更新: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tCAの種類: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tヘルパーの場所: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\t次のシリアル番号: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\t発行者名:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - クライアント証明書登録ツール\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "使い方: %s request [オプション]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "必須の引数:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* もしストレージに NSS データベースを使う場合:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tキーと証明書のための NSS データベース\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
-msgstr "  -n NAME\tNSS ベースストレージのためのニックネーム(-d オプションを指定した時のみ有効)\n"
+msgstr ""
+"  -n NAME\tNSS ベースストレージのためのニックネーム(-d オプションを指定した時"
+"のみ有効)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
-msgstr "  -t 名前\tNSS ベースの記憶領域のためのオプションのトークン名(-d オプションを指定した時のみ有効)\n"
+msgstr ""
+"  -t 名前\tNSS ベースの記憶領域のためのオプションのトークン名(-d オプションを"
+"指定した時のみ有効)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* もしストレージのためにファイルを使う時:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE\tプライベートキーのための PEM ファイル\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE\t証明書のための PEM ファイル (-k を指定した場合のみ有効)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* もしキーが暗号化されていた場合:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\t暗号化されたPIN コードが含まれるファイル\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN コードの値\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "任意の引数:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* 証明書の処理方法の設定:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME\tリクエストに割り当てるニックネーム\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr "  -G TYPE\tキーが存在しない場合に生成されるキーの形式\n"
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr "  -g SIZE\tキーが存在しない場合に生成されるキーのビット長\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr "  -r\t\t有効期限が近づいている時に証明書を更新する(デフォルト)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr "  -R\t\t有効期限が近づいても証明書を更新しない\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\t指定されたCAではなく、デフォルトを使用\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
-msgstr "  -T PROFILE\t名前つきプロファイルまたはテンプレートを使用して、CA がリクエストを処理するか確認します\n"
+msgstr ""
+"  -T PROFILE\t名前つきプロファイルまたはテンプレートを使用して、CA がリクエス"
+"トを処理するか確認します\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* 署名中リクエストのパラメーター:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
-msgstr "  -N NAME\t要求されたサブジェクト名を設定 (デフォルト: CN=<ホスト名>)\n"
+msgstr ""
+"  -N NAME\t要求されたサブジェクト名を設定 (デフォルト: CN=<ホスト名>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\t 拡張キー使用法(EKU)のOIDを設定\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\t要求されたキー使用法の値を設定する\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME\t要求されたプリンシパル名を設定\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAME\t設定するDNS名\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\t要求したEメールアドレスを設定\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* バスのオプション:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tシステムバス上の certmonger サービスに接続\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tセッションバス上の certmonger サービスに接続\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* その他のオプション:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\t証明書を保存する前に実行するコマンド\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\t証明書を保存した後に実行するコマンド\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\t詳細なすべてのエラーを報告\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "使い方: %s start-tracking [オプション]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* もし既存のリクエストを変更する時:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME\t既存の追跡リクエストのニックネーム\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* もしキーが暗号化されていた時:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME\t追跡リクエストに与えるニックネーム\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* 更新時に署名リクエストのためのパラメーター:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\t指定されたキーのOIDで拡張キー使用法(EKU)を上書き\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME\t要求されたプリンシパル名を上書き\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\t要求された DNS 名を上書き\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\t要求されたEメールアドレスを上書き\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "使い方: %s stop-tracking [オプション]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* リクエストの識別子:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME\t追跡リクエストのためのニックネーム\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "使い方: %s resubmit [オプション]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE\t証明書のための PEM ファイル\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* 署名リクエストのための新しいパラメーター値:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\t追跡リクエストに新しいニックネームを付与\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\t指定されたCAではなく、現在のいずれかを使用\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "使い方: %s list [オプション]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* 一般的なオプション:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA\tこの CA に関連付けられているリクエストと証明書の一覧のみ\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr " -r\t未処理の要求についての情報の一覧のみ\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr " -t\t追跡済み証明書についての情報の一覧のみ\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* もしも特定のリクエストが選択された場合:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
-msgstr "  -d DIR<span class=\"whitespace other\" title=\"Tab\">»</span>この NSS データベースを使用するリクエストと証明書のみを表示\n"
+msgstr ""
+"  -d DIR<span class=\"whitespace other\" title=\"Tab\">»</span>この NSS デー"
+"タベースを使用するリクエストと証明書のみを表示\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
-msgstr "  -n NAME<span class=\"whitespace other\" title=\"Tab\">»</span>このニックネームを使用するリクエストと証明書のみを表示\n"
+msgstr ""
+"  -n NAME<span class=\"whitespace other\" title=\"Tab\">»</span>このニック"
+"ネームを使用するリクエストと証明書のみを表示\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
-msgstr "  -f FILE<span class=\"whitespace other\" title=\"Tab\">»</span>この PEM ファイルに保存されているリクエストと証明書のみを表示\n"
+msgstr ""
+"  -f FILE<span class=\"whitespace other\" title=\"Tab\">»</span>この PEM ファ"
+"イルに保存されているリクエストと証明書のみを表示\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tシステムバス上の certmonger サービスに接続\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tセッションバス上の certmonger サービスに接続\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "使い方: %s list-cas [オプション]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\t指定された名前の CA についての情報一覧のみ表示\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "使い方: %s request [オプション]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "  -c CA\t指定された名前の CA についての情報一覧のみ表示\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: 認識できないコマンド\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "-t オプションは -K オプションと同時に使用できません。\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "-k オプションは -K オプションと同時に使用できません。\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "-K オプションは -k または -t オプションと同時に使用できません。\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "署名リクエストのためのプリンシパル名を解釈できません。\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "CA の XMLRPC サーバーの場所を解釈できません。\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
-msgstr "デフォルトのキーテーブルを使用するクライアントで \"host\" サービスの ccache セットアップ中にエラーが発生しました: %s。\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
+msgstr ""
+"デフォルトのキーテーブルを使用するクライアントで \"host\" サービスの ccache "
+"セットアップ中にエラーが発生しました: %s。\n"
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
-msgstr "デフォルトのキーテーブルを使用するクライアントで \"%s\" の ccache セットアップ中にエラーが発生しました: %s。\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgstr ""
+"デフォルトのキーテーブルを使用するクライアントで \"%s\" の ccache セットアッ"
+"プ中にエラーが発生しました: %s。\n"
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
-msgstr "デフォルトのキーテーブル \"%s\" を使用するクライアントで \"host\" サービスの ccache セットアップ中にエラーが発生しました: %s。\n"
+msgstr ""
+"デフォルトのキーテーブル \"%s\" を使用するクライアントで \"host\" サービスの "
+"ccache セットアップ中にエラーが発生しました: %s。\n"
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
-msgstr " \"%s\" の ccache をデフォルトのキーテーブル \"%s\" を使用するクライアントでセットアップ中にエラーが発生しました: %s。\n"
+msgstr ""
+" \"%s\" の ccache をデフォルトのキーテーブル \"%s\" を使用するクライアントで"
+"セットアップ中にエラーが発生しました: %s。\n"
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "クライアントで XMLRPC の設定中にエラーが発生しました。\n"
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -913,7 +1033,7 @@ msgstr "\t-p FILE    サービスの PID をファイルに書き込む\n"
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         強制的に NSS を FIPS モードにする\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "内部エラーが発生しました。"
 
@@ -926,120 +1046,130 @@ msgstr "該当するエントリーが見つかりません。\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "ニックネーム \"%s\" は、すでに CA で使われています。"
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "証明書ストレージの種類が指定されていません。"
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "証明書ストレージの種類 \"%s\" はサポートされていません。"
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "場所 \"%s\" は絶対パスでなければなりません。"
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "証明書ストレージの場所が指定されていません。"
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr "権限が無いため \"%s\" の親ディレクトリにアクセスできませんでした。"
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
-msgstr "場所 \"%s\" の親ディレクトリーは有効なディレクトリーでなければなりません。"
+msgstr ""
+"場所 \"%s\" の親ディレクトリーは有効なディレクトリーでなければなりません。"
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "場所 \"%s\" はファイルでなければなりません。"
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr "権限が無いため \"%s\" にアクセスできませんでした。"
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "場所 \"%s\" はディレクトリーでなければなりません。"
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "証明書のニックネームが指定されていません。"
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "ニックネーム \"%s\" のリクエストは、すでにあります。"
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
-msgstr "同じ場所にある証明書は、すでにニックネーム \"%s\" を持つリクエストで使用されています。"
+"Certificate at same location is already used by request with nickname \"%s\"."
+msgstr ""
+"同じ場所にある証明書は、すでにニックネーム \"%s\" を持つリクエストで使用され"
+"ています。"
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "キー・ストレージの種類 \"%s\" はサポートしていません。"
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "キー・ストレージの場所が指定されていません。"
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "キーのニックネームが指定されていません。"
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
-msgstr "同じ場所にあるキーは、すでにニックネーム \"%s\" を持つリクエストで使用されています。"
+msgstr ""
+"同じ場所にあるキーは、すでにニックネーム \"%s\" を持つリクエストで使用されて"
+"います。"
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "キー形式 \"%s\" はサポートされません。"
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "そのような証明局はありません。"
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "認証局 \"%s\" は認知されていない証明局です。"
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "認識されていないパラメーターか、もしくは不適切なデータ型です。"
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr "十分なアクセス権がありません。操作を root として再実行してください。\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "certmonger サービスが開始していることを確認してください。\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr "certmonger サービスがまだ実行中であることを確認してください。\n"
diff --git a/po/ja_JP.po b/po/ja_JP.po
index 583b559..a280fac 100644
--- a/po/ja_JP.po
+++ b/po/ja_JP.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Japanese (Japan) (http://www.transifex.com/projects/p/fedora/"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ka.po b/po/ka.po
index 868e9d1..9dbdf59 100644
--- a/po/ka.po
+++ b/po/ka.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Georgian (http://www.transifex.com/projects/p/fedora/language/"
-"ka/)\n"
+"Language-Team: Georgian (http://www.transifex.com/projects/p/certmonger/"
+"language/ka/)\n"
 "Language: ka\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/kk.po b/po/kk.po
index c84e9b8..854c68f 100644
--- a/po/kk.po
+++ b/po/kk.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Kazakh (http://www.transifex.com/projects/p/fedora/language/"
-"kk/)\n"
+"Language-Team: Kazakh (http://www.transifex.com/projects/p/certmonger/"
+"language/kk/)\n"
 "Language: kk\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/km.po b/po/km.po
index 5a4bf3f..6a64a99 100644
--- a/po/km.po
+++ b/po/km.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Khmer (http://www.transifex.com/projects/p/fedora/language/"
-"km/)\n"
+"Language-Team: Khmer (http://www.transifex.com/projects/p/certmonger/"
+"language/km/)\n"
 "Language: km\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/kn.po b/po/kn.po
index eb413f8..b712757 100644
--- a/po/kn.po
+++ b/po/kn.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Kannada (http://www.transifex.com/projects/p/fedora/language/"
-"kn/)\n"
+"Language-Team: Kannada (http://www.transifex.com/projects/p/certmonger/"
+"language/kn/)\n"
 "Language: kn\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ko.po b/po/ko.po
index 9cd9e7c..2422fc3 100644
--- a/po/ko.po
+++ b/po/ko.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Korean (http://www.transifex.com/projects/p/fedora/language/"
-"ko/)\n"
+"Language-Team: Korean (http://www.transifex.com/projects/p/certmonger/"
+"language/ko/)\n"
 "Language: ko\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ks.po b/po/ks.po
index 9669bd7..b36c5da 100644
--- a/po/ks.po
+++ b/po/ks.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Kashmiri (http://www.transifex.com/projects/p/fedora/language/"
-"ks/)\n"
+"Language-Team: Kashmiri (http://www.transifex.com/projects/p/certmonger/"
+"language/ks/)\n"
 "Language: ks\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ku.po b/po/ku.po
index a1362b7..010e4e8 100644
--- a/po/ku.po
+++ b/po/ku.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Kurdish (http://www.transifex.com/projects/p/fedora/language/"
-"ku/)\n"
+"Language-Team: Kurdish (http://www.transifex.com/projects/p/certmonger/"
+"language/ku/)\n"
 "Language: ku\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ky.po b/po/ky.po
index 7896a5c..9624f8a 100644
--- a/po/ky.po
+++ b/po/ky.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Kirgyz (http://www.transifex.com/projects/p/fedora/language/"
-"ky/)\n"
+"Language-Team: Kirgyz (http://www.transifex.com/projects/p/certmonger/"
+"language/ky/)\n"
 "Language: ky\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/la.po b/po/la.po
index ac7b648..b4894f4 100644
--- a/po/la.po
+++ b/po/la.po
@@ -1,28 +1,29 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Latin (http://www.transifex.com/projects/p/certmonger/language/la/)\n"
+"Language-Team: Latin (http://www.transifex.com/projects/p/certmonger/"
+"language/la/)\n"
+"Language: la\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: la\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/lo.po b/po/lo.po
index 7ec64c2..1085203 100644
--- a/po/lo.po
+++ b/po/lo.po
@@ -1,28 +1,29 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Lao (http://www.transifex.com/projects/p/certmonger/language/lo/)\n"
+"Language-Team: Lao (http://www.transifex.com/projects/p/certmonger/language/"
+"lo/)\n"
+"Language: lo\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: lo\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/lt.po b/po/lt.po
index 41f9760..672f75c 100644
--- a/po/lt.po
+++ b/po/lt.po
@@ -1,29 +1,31 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 # FULL NAME <EMAIL@ADDRESS>, 2014
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Lithuanian (http://www.transifex.com/projects/p/certmonger/language/lt/)\n"
+"Language-Team: Lithuanian (http://www.transifex.com/projects/p/certmonger/"
+"language/lt/)\n"
+"Language: lt\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: lt\n"
-"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && (n"
+"%100<10 || n%100>=20) ? 1 : 2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Nepavyko nustatyti LĮ serverio.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Nepavyko perskaityti pasirašymo užklausos.\n"
@@ -35,9 +37,9 @@ msgstr "Klaida nustatant XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Klaida skaitant serverio atsakymą.\n"
@@ -102,7 +104,9 @@ msgstr "Kelias „%s“ nėra absoliutus, vietoj to bandoma naudoti „%s“.\n"
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
-msgstr "Kelias „%s“ nėra absoliutus ir kilo klaida nustatant dabartinio katalogo pavadinimą.\n"
+msgstr ""
+"Kelias „%s“ nėra absoliutus ir kilo klaida nustatant dabartinio katalogo "
+"pavadinimą.\n"
 
 #: src/getcert.c:118
 #, c-format
@@ -134,7 +138,7 @@ msgstr "Baigėsi atmintis.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Klaida jungiantis prie DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Patikrinkite, ar pranešimų magistralės (D-Bus) tarnyba veikia.\n"
@@ -169,700 +173,790 @@ msgstr "Gautas klaidos pranešimas iš vietinės %s tarnybos.\n"
 msgid "No response received from %s service.\n"
 msgstr "Negautas atsakymas iš %s tarnybos.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Klaida inicializuojant Kerberos biblioteką: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Neatpažintas keyUsage „%s“.\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Nepavyko įvertinti OID „%s“.\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Klaida skaitant Kerberos direktoriaus pavadinimą „%s“: %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Klaida atstatant Kerberos direktoriaus pavadinimą „%s“: %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: parametras reikalauja argumento -- „%c“\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: netinkamas parametras -- „%c“\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Klaida: nenaudojamas papildomas argumentas „%s“.\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Klaida: pateikti nenaudojami papildomi argumentai.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Duomenų bazės vieta arba slapyvardis nurodyti be vienas kito.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Nurodyti abu: duomenų bazės katalogas ir liudijimo failas.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
-msgstr "Nenurodytas nei duomenų bazės katalogas bei slapyvardis, nei liudijimo failas.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
+msgstr ""
+"Nenurodytas nei duomenų bazės katalogas bei slapyvardis, nei liudijimo "
+"failas.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Raktas ir liudijimas negali būti abu įrašyti į tą patį failą.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
-msgstr "IPA realizacija reikalauja naudoti parametrą -K (direktoriaus pavadinimas), kai naudojamas parametras -N (subjekto pavadinimas).\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
+msgstr ""
+"IPA realizacija reikalauja naudoti parametrą -K (direktoriaus pavadinimas), "
+"kai naudojamas parametras -N (subjekto pavadinimas).\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Nerasta LĮ pavadinimu „%s“.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Klaida nustatant užklausos argumentus.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Nauja pasirašymo užklausa „%s“ pridėta.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Negalima pridėti naujos pasirašymo užklausos.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Pridėtas nauja sekimo užklausa „%s“.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Negalima pridėti naujos sekimo užklausos.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
-msgstr "Nenurodytas nei duomenų bazės katalogas bei slapyvardis, nei liudijimo failas.\n"
+msgstr ""
+"Nenurodytas nei duomenų bazės katalogas bei slapyvardis, nei liudijimo "
+"failas.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Užklausa „%s“ pakeista.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Užklausa „%s“ negali būti pakeista.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Nerasta užklausa su nurodytu slapyvardžiu.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Nerasta užklausa, kuri atitinka argumentus.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Užklausa „%s“ pašalinta.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Užklausos „%s“ nepavyko pašalinti.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Klaida keičiant „%s“.\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Iš naujo pateikiama „%s“ į „%s“.\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Iš naujo pateikiama „%s“.\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Klaida bandant pateikti „%s“ į „%s“.\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Klaida bandant pateikti „%s“.\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Sekamų liudijimų ir užklausų skaičius: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Užklausos ID „%s“:\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tbūsena: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tlį-klaida: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tužstrigo: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\traktų poros saugykla: tipas=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "NĖRA"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",vieta='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",slapyvardis='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",leksema='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfailas=„%s“"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tliudijimas: tipas=%s,vieta=„%s“"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tLĮ: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tišdavė: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsubjektas: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tgalioja iki: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "nežinoma"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\tel. paštas: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tdirektoriaus pavadinimas: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\trakto naudojimas: %s\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tkomanda prieš įrašant: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tkomanda po įrašymo: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tsekimas: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tautomatinis atnaujinimas: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "LĮ „%s“:\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tlį tipas: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tpagalbininko vieta: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tkitas serijinis numeris: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tžinomų išdavėjų pavadinimai:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - kliento liudijimo įtraukimo įrankis\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Naudojimas: %s užklausa [parametrai]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Būtini argumentai:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Jei naudojama NSS duomenų bazė saugojimui:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tNSS duomenų bazė raktui ir liudijimui\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
-msgstr "  -n PAVADINIMAS\tslapyvardis NSS pagrindo saugyklai (tinka tik su -d)\n"
+msgstr ""
+"  -n PAVADINIMAS\tslapyvardis NSS pagrindo saugyklai (tinka tik su -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
-msgstr "  -t PAVADINIMAS\tnebūtinas leksemos pavadinimas NSS pagrindo saugyklai (tinka tik su -d)\n"
+msgstr ""
+"  -t PAVADINIMAS\tnebūtinas leksemos pavadinimas NSS pagrindo saugyklai "
+"(tinka tik su -d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Jei saugyklai naudojami failai:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FAILAS\tprivataus rakto PEM failas\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FAILAS\tliudijimo PEM failas (tinka tik su -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Jei raktai turi būti šifruoti:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FAILAS\tfailas, kuris saugo šifravimo PIN\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN vertė\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Nebūtini argumentai:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Liudijimo apdorojimo nustatymai:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I PAVADINIMAS\tužklausai priskiriamas slapyvardis\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr "  -g DYDIS\tgeneruojamo rakto dydis, jei rakto dar nėra\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
-msgstr "  -r\t\tbandymas atnaujinti liudijimą, kai baigiasi galiojimas (numatyta)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+msgstr ""
+"  -r\t\tbandymas atnaujinti liudijimą, kai baigiasi galiojimas (numatyta)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr "  -R\t\tnebandyti atnaujinti liudijimo, kai baigiasi galiojimas\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c LĮ\t\tnaudoti nurodytą LĮ vietoj numatytosios\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
-msgstr "  -T PROFILIS\tprašyti LĮ apdoroti užklausą naudojant pavadintą profilį ar šabloną\n"
+msgstr ""
+"  -T PROFILIS\tprašyti LĮ apdoroti užklausą naudojant pavadintą profilį ar "
+"šabloną\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parametrai pasirašymo užklausai:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
-msgstr "  -N PAVADINIMAS\tnustatyti subjekto pavadinimą (numatyta: CN=<serveris>)\n"
+msgstr ""
+"  -N PAVADINIMAS\tnustatyti subjekto pavadinimą (numatyta: CN=<serveris>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "-U IŠPLNAUD\tnustatyti prašomą išplėstinį rakto naudojimo OID\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u RAKTONAUD\tnustatyti prašomą rakto naudojimo vertę\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K PAVADINIMAS\tnustatyti prašomą direktoriaus pavadinimą\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "-D DNSPAV\tnustatyti prašomą DNS pavadinimą\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E ELPAŠTAS\tnustatyti prašomą el. pašto adresą\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Magistralės parametrai:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tprisijungti prie certmonger tarnybos sistemos magistralėje\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tprisijungti prie certmonger tarnybos seanso magistralėje\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Kiti parametrai:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tkomanda, vykdoma prieš įrašant liudijimą\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tkomanda, vykdoma po liudijimo įrašymo\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tpranešti visą informaciją apie klaidas\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Naudojimas: %s start-tracking [parametrai]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Jei keičiama esama užklausa:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i PAVADINIMAS\tesamos sekamos užklausos slapyvardis\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Jei raktai yra šifruoti:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I PAVADINIMAS\tslapyvardis sekamai užklausai\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parametrai pasirašymo užklausai atnaujinimo metu:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U IŠPLNAUD\tperrašyti išplėstinio rakto naudojimo OID\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K PAVADINIMAS\tperrašyti prašomą direktoriaus pavadinimą\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSPAV\tperrašyti prašomą DNS pavadinimą\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E ELPAŠAS\tperrašyti prašomą el. pašto adresą\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Naudojimas: %s stop-tracking [parametrai]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Pagal užklausos identifikatorių:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i PAV\tslapyvardis sekamai užklausai\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Naudojimas: %s resubmit [parametrai]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FAILAS\tliudijimo PEM failas\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Naujos parametrų vertės pasirašymo užklausai:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I PAV\tnaujas slapyvardis sekimo užklausai\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c LĮ\t\tnaudoti nurodytą LĮ vietoj dabartinės\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Naudojimas: %s list [parametrai]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Bendri parametrai:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
-msgstr "  -c LĮ\tišvardinti tik užklausas ir liudijimus, susijusius su šia LĮ\n"
+msgstr ""
+"  -c LĮ\tišvardinti tik užklausas ir liudijimus, susijusius su šia LĮ\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tpateikti tik informaciją apie neįvykdytas užklausas\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tpateikti tik informaciją apie sekamus liudijimus\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Jei pasirenkama specifinė užklausa:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
-msgstr "  -d DIR\tišvardinti tik užklausas ir liudijimus, kurie naudoja šią NSS duomenų bazę\n"
+msgstr ""
+"  -d DIR\tišvardinti tik užklausas ir liudijimus, kurie naudoja šią NSS "
+"duomenų bazę\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
-msgstr "  -n PAV\tišvardinti tik užklausas ir liudijimus, kurie naudoja šį slapyvardį\n"
+msgstr ""
+"  -n PAV\tišvardinti tik užklausas ir liudijimus, kurie naudoja šį "
+"slapyvardį\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
-msgstr "  -f FAILAS\tišvardinti tik užklausas ir liudijimu, įrašytus į šį PEM failą\n"
+msgstr ""
+"  -f FAILAS\tišvardinti tik užklausas ir liudijimu, įrašytus į šį PEM failą\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tprisijungti prie certmonger tarnybos sistemos magistralėje\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tprisijungti prie certmonger tarnybos seanso magistralėje\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Naudojimas: %s list-cas [parametrai]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c LĮ\tpateikti tik informaciją apie LĮ su šiuo pavadinimu\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Naudojimas: %s užklausa [parametrai]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "  -c LĮ\tpateikti tik informaciją apie LĮ su šiuo pavadinimu\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: neatpažinta komanda\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "-t patametro negalima naudoti su -K parametru.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "-k parametro negalima naudoti su parametru -K.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "-K parametro negalima naudoti su -k arba -t parametru.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Nepavyko nustatyti pasirašymo užklausos direktoriaus pavadinimo.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Nepavyko nustatyti LĮ XMLRPC serverio vietos.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -908,7 +1002,7 @@ msgstr "\t-p FAILAS   įrašyti tarnybos PID failą\n"
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         priverstinė NSS į FIPS veikseną\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Kilo vidinė klaida."
 
@@ -921,120 +1015,127 @@ msgstr "Nerastas atitinkamas įrašas.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Jau yra LĮ slapyvardžiu „%s“."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Nenurodytas liudijimo saugyklos tipas."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Liudijimo saugyklos tipas „%s“ nepalaikomas."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Vieta „%s“ turi būti absoliučiu kelius."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Nenurodyta liudijimo saugojimo vieta."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Vietos „%s“ tėvas turi būti katalogas."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Vieta „%s“ turi būti failas."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Vieta „%s“ turi būti katalogas."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Nenurodytas liudijimo slapyvardis."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Jau yra užklausa slapyvardžiu „%s“."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
-msgstr "Liudijimas toje pačioje vietoje jau naudojamas užklausos slapyvardžiu „%s“."
+"Certificate at same location is already used by request with nickname \"%s\"."
+msgstr ""
+"Liudijimas toje pačioje vietoje jau naudojamas užklausos slapyvardžiu „%s“."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Rakto saugyklos tipas „%s“ nepalaikomas."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "Nenurodyta rakto saugyklos vieta."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Nenurodyta rakto slapyvardis."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
-msgstr "Raktas toje pačioje vietoje jau naudojamas užklausos slapyvardžiu „%s“."
+msgstr ""
+"Raktas toje pačioje vietoje jau naudojamas užklausos slapyvardžiu „%s“."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Nėra tokios LĮ."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Liudijimų įstaiga „%s“ nežinoma."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Neatpažintas parametras arba blogas vertės tipas."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr "Nepakanka prieigos.  Bandykite atlikti veiksmą root naudotoju.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Patikrinkite, ar certmonger tarnyba veikia.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr "Patikrinkite, ar certmonger tarnyba vis dar veikia.\n"
diff --git a/po/lv.po b/po/lv.po
index 172ad8d..2df45a6 100644
--- a/po/lv.po
+++ b/po/lv.po
@@ -1,28 +1,30 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Latvian (http://www.transifex.com/projects/p/certmonger/language/lv/)\n"
+"Language-Team: Latvian (http://www.transifex.com/projects/p/certmonger/"
+"language/lv/)\n"
+"Language: lv\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: lv\n"
-"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n != 0 ? 1 : 2);\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n != 0 ? 1 : "
+"2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/mai.po b/po/mai.po
index 9dda823..a351e33 100644
--- a/po/mai.po
+++ b/po/mai.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Maithili (http://www.transifex.com/projects/p/fedora/language/"
-"mai/)\n"
+"Language-Team: Maithili (http://www.transifex.com/projects/p/certmonger/"
+"language/mai/)\n"
 "Language: mai\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/mg.po b/po/mg.po
index 1a5a1c5..d658bad 100644
--- a/po/mg.po
+++ b/po/mg.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Malagasy (http://www.transifex.com/projects/p/fedora/language/"
-"mg/)\n"
+"Language-Team: Malagasy (http://www.transifex.com/projects/p/certmonger/"
+"language/mg/)\n"
 "Language: mg\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/mk.po b/po/mk.po
index 44c5dc0..e3c3f80 100644
--- a/po/mk.po
+++ b/po/mk.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Macedonian (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Macedonian (http://www.transifex.com/projects/p/certmonger/"
 "language/mk/)\n"
 "Language: mk\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n % 10 == 1 && n % 100 != 11) ? 0 : 1;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ml.po b/po/ml.po
index 749d2bf..f5957c2 100644
--- a/po/ml.po
+++ b/po/ml.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Malayalam (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Malayalam (http://www.transifex.com/projects/p/certmonger/"
 "language/ml/)\n"
 "Language: ml\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/mn.po b/po/mn.po
index 9d8650f..ae65f89 100644
--- a/po/mn.po
+++ b/po/mn.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Mongolian (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Mongolian (http://www.transifex.com/projects/p/certmonger/"
 "language/mn/)\n"
 "Language: mn\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/mr.po b/po/mr.po
index 1605f37..c2bc033 100644
--- a/po/mr.po
+++ b/po/mr.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Marathi (http://www.transifex.com/projects/p/fedora/language/"
-"mr/)\n"
+"Language-Team: Marathi (http://www.transifex.com/projects/p/certmonger/"
+"language/mr/)\n"
 "Language: mr\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ms.po b/po/ms.po
index ea5fe4f..af30461 100644
--- a/po/ms.po
+++ b/po/ms.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Malay (http://www.transifex.com/projects/p/fedora/language/"
-"ms/)\n"
+"Language-Team: Malay (http://www.transifex.com/projects/p/certmonger/"
+"language/ms/)\n"
 "Language: ms\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ms_MY.po b/po/ms_MY.po
index 542160a..63f1958 100644
--- a/po/ms_MY.po
+++ b/po/ms_MY.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Malay (Malaysia) (http://www.transifex.com/projects/p/fedora/"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/my.po b/po/my.po
index dfd7f50..de03df5 100644
--- a/po/my.po
+++ b/po/my.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Burmese (http://www.transifex.com/projects/p/fedora/language/"
-"my/)\n"
+"Language-Team: Burmese (http://www.transifex.com/projects/p/certmonger/"
+"language/my/)\n"
 "Language: my\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/nb.po b/po/nb.po
index bd6797d..9f72ddb 100644
--- a/po/nb.po
+++ b/po/nb.po
@@ -8,23 +8,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Norwegian Bokmål (http://www.transifex.com/projects/p/fedora/"
-"language/nb/)\n"
+"Language-Team: Norwegian Bokmål (http://www.transifex.com/projects/p/"
+"certmonger/language/nb/)\n"
 "Language: nb\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Kan ikke bestemme vertsnavn for CA.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Kan ikke lese forespørsel om signering.\n"
@@ -36,9 +36,9 @@ msgstr "Feil ved oppsett av XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Feil ved tolking av svar fra tjener.\n"
@@ -69,9 +69,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Feil ved oppsett av XMLRPC.\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr "Feil ved tilkobling til DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Kan ikke bestemme vertsnavn for CA.\n"
+msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,121 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
-#, fuzzy
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
-msgstr "Feil ved tolking av svar fra tjener.\n"
+msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/nds.po b/po/nds.po
index 81f9171..9a0db10 100644
--- a/po/nds.po
+++ b/po/nds.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Low German (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Low German (http://www.transifex.com/projects/p/certmonger/"
 "language/nds/)\n"
 "Language: nds\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ne.po b/po/ne.po
index f011da2..966c748 100644
--- a/po/ne.po
+++ b/po/ne.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Nepali (http://www.transifex.com/projects/p/fedora/language/"
-"ne/)\n"
+"Language-Team: Nepali (http://www.transifex.com/projects/p/certmonger/"
+"language/ne/)\n"
 "Language: ne\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/nl.po b/po/nl.po
index 572767a..ae65a39 100644
--- a/po/nl.po
+++ b/po/nl.po
@@ -8,23 +8,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-09 16:20+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-29 13:02+0000\n"
 "Last-Translator: Geert Warrink <geert.warrink@onsnet.nu>\n"
-"Language-Team: Dutch (http://www.transifex.com/projects/p/fedora/language/"
-"nl/)\n"
+"Language-Team: Dutch (http://www.transifex.com/projects/p/certmonger/"
+"language/nl/)\n"
 "Language: nl\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Kan de hostnaam van CA niet bepalen.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Kan ondetekeningverzoek niet lezen.\n"
@@ -36,9 +36,9 @@ msgstr "Fout bij het opzetten van XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Fout bij het ontleden van antwoord van de server.\n"
@@ -69,9 +69,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Geen profiel/template (-T) gegeven en er is geen standaard bekend.\n"
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Fout bij het opzetten van XMLRPC.\n"
+msgstr "Fout bij het afsluiten van NSS.\n"
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -139,7 +139,7 @@ msgstr "Geen geheugen beschikbaar.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Fout bij het verbinden met DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Verifieer of de berichtenbus (D-Bus) service draait.\n"
@@ -174,90 +174,90 @@ msgstr "Fout ontvangen van de lokale %s service.\n"
 msgid "No response received from %s service.\n"
 msgstr "Geen reactie ontvangen van %s service.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Fout bij het initialiseren van Kerberos bibliotheek: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Er is geen ondersteuning voor het aanmaken van \"%s\" sleutels.\n"
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr "Bekende sleuteltypen zijn:"
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Niet herkende keyUsage \"%s\".\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Kon OID \"%s\" niet evalueren.\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fout bij het ontleden van Kerberos principal naam \"%s\": %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fout bij unparsing van Kerberos principal naam \"%s\": %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: optie vereist een argument -- '%c'\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: ongeldige optie -- '%c'\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Fout: niet gebruikt extra argument \"%s\".\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 "Fout: er zijn niet gebruikte extra argumenten opgegeven.\n"
 " \n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Database locatie of bijnaam opgegeven zonder de andere.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Database map en certificaatbestand beide gespecificeerd.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr "Zowel database map als bijnaam of certificaat niet opgegeven.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 "Sleutel en certificaat kunnen niet beide in hetzelfde bestand opgeslagen "
 "worden.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -266,359 +266,409 @@ msgstr ""
 "De IPA backend vereist het gebruik van de -K optie (principal naam) als de -"
 "N optie (onderwerpnaam) gebruikt wordt.\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Geen CA met de naam \"%s\" gevonden.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Fout bij instellen verzoek argumenten.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Nieuw ondertekeningverzoek \"%s\" toegevoegd.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Nieuw ondertekeningverzoek  kon niet toegevoegd worden.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Nieuwe track verzoek \"%s\" toegevoegd.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Nieuw track verzoek kon niet toegevoegd worden.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr "Zowel ID als database map en bijnaam of certificaat niet opgegeven.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Verzoek \"%s\" gewijzigd.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Verzoek \"%s\" kan niet gewijzigd worden.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Geen aanvraag gevonden met de gespecificeerde bijnaam.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Geen verzoek gevonden dat overeenkomt met argumenten.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Verzoek \"%s\" verwijderd.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Verzoek \"%s\" kon niet verwijderd worden.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Fout bij het wijzigen van \"%s\".\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "\"%s\" opnieuw indienen bij \"%s\".\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "\"%s\" opnieuw indienen.\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Fout bij het indienen van \"%s\" bij \"%s\".\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Fout bij het indienen van \"%s\".\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Aantal certificaten en verzoeken dat bijgehouden wordt:%d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Verzoek ID '%s':\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "»status: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "»ca-fout: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "»vast: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "»sleutelpaar opslag: type=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "GEEN"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",locatie='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",bijnaam='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinbestand='%s'"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "»certificaat: type=%s,locatie='%s'"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "»CA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "»uitgever: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "»onderwerp: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "»verloopt: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "onbekend"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "»email: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "»dns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "»principal naam: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr "\tIP adres: "
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tkey usage: %s\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "»eku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tpre-save command: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tpost-save command: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "»track: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "»auto-renew: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "»ca-type: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "»helper-locatie %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "»next-serial-nummer: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "»bekende-uitgever-namen:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - cliënt certificaat uitgeef gereedschap\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Gebruik: %s request [opties]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Vereiste argumenten:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Als een NSS database voor opslag gebruikt wordt:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d MAP»NSS database voor sleutel en cert\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAAM»bijnaam voor op NSS gebaseerde opslag (alleen geldig met -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAAM»optionele token naam voor op NSS gebaseerde opslag (alleen geldig "
 "met -d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Als bestanden voor opslag gebruikt worden:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k BESTAND»PEM bestand voor prive sleutel\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f BESTAND»PEM bestand voor certificaat (alleen geldig met -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Als sleutels gecodeerd moeten worden:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p BESTAND»bestand welke de codering PIN bevat\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN»PIN waarde\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Optionele argumenten:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Certificaat afhandel instellingen:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAAM»bijnaam toegekend aan het verzoek\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 "  -G TYPE\tsleuteltype dat aangemaakt wordt als er nog geen aanwezig is\n"
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g GROOTTE»grootte van de te genereren sleutel als er nog geen aanwezig "
 "is\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r»»probeer het certificaat te vernieuwen als de verloopdatum nadert "
 "(standaard)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R»»probeer het certificaat niet te vernieuwen als de verloopdatum nadert\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA»»gebruik de gespecificeerde CA in plaats van de standaard\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -626,239 +676,257 @@ msgstr ""
 "  -T PROFILE\tvraag de CA om het verzoek de verwerken met het opgegeven "
 "profiel of template\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parameters voor het ondertekening verzoek:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAAM»stel de gevraagde subject naam in (standaard: CN=<hostnaam>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE»stel het gevraagde uitgebreide sleutel gebruik OID in\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\tstel aangevraagde sleutel gebruik waarde in\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAAM»stel de gevraagde principal naam in\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAAM»stel de gevraagde DNS naam in\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL»stel het gevraagde email adres in\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A ADRES\tstel vereiste IP adres in\n"
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Bus opties:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S»»verbind met de certmonger service op de systeem bus\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s»»verbind met de certmonger service op de sessie bus\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Andere opties:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tcommando uit te voeren voor het opslaan van het certificaat\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tcommando uit te voeren na het opslaan van het certificaat\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v»rapporteer alle foutdetails\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Gebruik: %s start-tracking [opties]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Als een bestaande aanvraag veranderd wordt:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAAM»bijnaam van een bestaand track verzoek\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Als sleutels gecodeerd zijn:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAAM»bijnaam te geven aan track verzoek\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parameters voor het ondertekeningverzoek bij het vernieuwen:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE»overschrijf gevraagde uitgebreide sleutel gebruik OID\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAAM»overschrijf gevraagde principal naame\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAAM»overschrijf gevraagde DNS naam\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL»overschrijf gevraagde email adres\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A ADRES\toverschrijf gevraagde IP adres\n"
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Gebruik: %s stop-tracking [opties]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Op verzoek id:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAAM»bijnaam voor track verzoek\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Gebruik: %s resubmit [opties]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f BESTAND»PEM bestand voor certificaat\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nieuwe parameterwaarden voor de ondertekening verzoek:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAAM»nieuwe bijnaam om aan track verzoek te geven\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA»»gebruik de gespecificeerde CA in plaats van de huidige\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Gebruik: %s list [opties]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Algemene opties:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA»laat allen verzoeken certificaten zien die bij deze CA horen\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r»laat alleen informatie zien over uitstaande verzoeken\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t»laat alleen informatie zien over gevolgde certificaten\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Als een specifiek verzoek geselecteerd wordt:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d MAP»toon alleen verzoeken en certificaten die deze NSS database "
 "gebruiken\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAAM» toon alleen verzoeken en certificaten die deze bijnaam gebruiken\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f BESTAND»toon alleen verzoeken en certificaten die in dit PEM bestand "
 "opgeslagen zijn\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S»verbind met de certmonger service op de systeem bus\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s»verbind met de certmonger service op de sessie bus\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Gebruik: %s list-cas [opties]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA»laat alleen informatie zien over de CA met deze naam\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Gebruik: %s request [opties]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "  -c CA»laat alleen informatie zien over de CA met deze naam\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: onbekend commando\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "De -t optie kan niet met de -K optie gebruikt worden.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "De -k optie kan niet met de -K optie gebruikt worden.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "De -K optie niet met de -k of the -t optie gebruikt worden.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Kan principal naam voor de aanvraag ondertekening niet bepalen.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Kan locatie van CA XMLRPC server niet vaststellen.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -867,7 +935,7 @@ msgstr ""
 "Fout bij het instellen van ccache voor \"host\" service op cliënt die "
 "standaard keytab: %s gebruikt.\n"
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
@@ -875,7 +943,7 @@ msgstr ""
 "Fout bij het instellen van ccache voor  \"%s\" op cliënt die standaard "
 "keytab: %s gebruikt.\n"
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -884,27 +952,27 @@ msgstr ""
 "Fout bij het instellen van ccache voor \"host\" service die keytab \"%s\" "
 "gebruikt: %s.\n"
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 "Fout bij het instellen van ccache voor \"%s\" op cliënt die keytab \"%s\" "
 "gebruikt: %s.\n"
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "Fout bij het instellen van XMLRPC op de cliënt.\n"
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Kan locatie van CA XMLRPC server niet vaststellen.\n"
+msgstr "Kan locatie van IPA LDAP server niet vaststellen.\n"
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "Kan locatie van CA XMLRPC server niet vaststellen.\n"
+msgstr "Kan basis DN niet vaststellen uit domeininformatie van IPA server.\n"
 
 #: src/main.c:120
 #, c-format
@@ -947,7 +1015,7 @@ msgstr "\t-p BESTAND schrijf een service PID naar bestand\n"
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         forceer NSS naar de FIPS modus\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Er is een interne fout opgetreden."
 
@@ -960,26 +1028,28 @@ msgstr "Geen bijpassende ingang gevonden.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Er is al een CA met de bijnaam \"%s\"."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Certificaat opslag type niet gespecificeerd."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Certificaat opslag type \"%s\" niet ondersteund."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "De locatie \"%s\" moet een absoluut pad zijn."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Certificaat opslaglocatie niet gespecificeerd."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -988,37 +1058,40 @@ msgstr ""
 "Er is geen toegang tot de ouder van locatie \"%s\" wegens onvoldoende "
 "rechten."
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "De ouder van locatie \"%s\" moet een geldige map zijn."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "De locatie \"%s\" moet een bestand zijn."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr "Er is geen toegang tot de locatie \"%s\" wegens onvoldoende rechten."
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "De locatie \"%s\" moet een map zijn."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Certificaat bijnaam niet opgegeven."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Er is al een verzoek met de bijnaam \"%s\"."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
@@ -1026,60 +1099,60 @@ msgstr ""
 "Een certificaat op dezelfde locatie wordt al gebruik door een aanvraag met "
 "bijnaam \"%s\"."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Sleutel opslag type \"%s\" niet ondersteund."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "sleutel opslaglocatie niet gespecificeerd."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Sleutel bijnaam niet opgegeven."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Een sleutel op dezelfde locatie wordt al gebruik door een aanvraag met "
 "bijnaam \"%s\"."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Er is geen ondersteuning voor sleuteltype \"%s\"."
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Onbekende CA."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Certificaat autoriteit \"%s\" is niet bekend."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Onbekende parameter of verkeerde type waarde."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr "Fout bij het ontleden van argumenten."
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr "Onbekende eigenschap naam."
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr "Onvoldoende toegang.  Probeer de bewerking opnieuw als root.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Verifieer of de certmonger service opgestart werd.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr "Verifieer of de certmonger service nog steeds draait.\n"
diff --git a/po/nn.po b/po/nn.po
index e08b433..50d7cbf 100644
--- a/po/nn.po
+++ b/po/nn.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Norwegian Nynorsk (http://www.transifex.com/projects/p/fedora/"
-"language/nn/)\n"
+"Language-Team: Norwegian Nynorsk (http://www.transifex.com/projects/p/"
+"certmonger/language/nn/)\n"
 "Language: nn\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/no.po b/po/no.po
index 6ae0d39..92275d2 100644
--- a/po/no.po
+++ b/po/no.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Norwegian (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Norwegian (http://www.transifex.com/projects/p/certmonger/"
 "language/no/)\n"
 "Language: no\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/nso.po b/po/nso.po
index d21e545..9635bb6 100644
--- a/po/nso.po
+++ b/po/nso.po
@@ -1,28 +1,29 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Northern Sotho (http://www.transifex.com/projects/p/certmonger/language/nso/)\n"
+"Language-Team: Northern Sotho (http://www.transifex.com/projects/p/"
+"certmonger/language/nso/)\n"
+"Language: nso\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: nso\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/or.po b/po/or.po
index 7da4975..a2d7e5a 100644
--- a/po/or.po
+++ b/po/or.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Oriya (http://www.transifex.com/projects/p/fedora/language/"
-"or/)\n"
+"Language-Team: Oriya (http://www.transifex.com/projects/p/certmonger/"
+"language/or/)\n"
 "Language: or\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/pa.po b/po/pa.po
index 813dd37..39fd98d 100644
--- a/po/pa.po
+++ b/po/pa.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Panjabi (Punjabi) (http://www.transifex.com/projects/p/fedora/"
-"language/pa/)\n"
+"Language-Team: Panjabi (Punjabi) (http://www.transifex.com/projects/p/"
+"certmonger/language/pa/)\n"
 "Language: pa\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/pl.po b/po/pl.po
index 01dd514..62c44d0 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -9,11 +9,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-09 16:03+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-29 13:20+0000\n"
 "Last-Translator: Piotr Drąg <piotrdrag@gmail.com>\n"
-"Language-Team: Polish (http://www.transifex.com/projects/p/fedora/language/"
-"pl/)\n"
+"Language-Team: Polish (http://www.transifex.com/projects/p/certmonger/"
+"language/pl/)\n"
 "Language: pl\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -21,12 +21,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=(n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 "
 "|| n%100>=20) ? 1 : 2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Nie można określić nazwy komputera CA.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Nie można odczytać żądania podpisania.\n"
@@ -38,9 +38,9 @@ msgstr "Błąd podczas ustawiania dla XML-RPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Błąd podczas przetwarzania odpowiedzi serwera.\n"
@@ -72,9 +72,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Nie podano profilu/szablonu (-T), a nie ma wartości domyślnej.\n"
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Błąd podczas ustawiania dla XML-RPC.\n"
+msgstr "Błąd podczas wyłączania NSS.\n"
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -141,7 +141,7 @@ msgstr "Brak pamięci.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Błąd podczas łączenia z D-Bus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -178,88 +178,88 @@ msgstr "Otrzymano błędną odpowiedź z lokalnej usługi %s.\n"
 msgid "No response received from %s service.\n"
 msgstr "Nie otrzymano odpowiedzi z usługi %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Błąd podczas inicjowania biblioteki Kerberos: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Brak obsługi tworzenia kluczy \"%s\".\n"
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr "Znane typy kluczy:"
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Nierozpoznane użycie klucza \"%s\".\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Nie można obliczyć OID \"%s\".\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Błąd podczas przetwarzania nazwy naczelnika Kerberosa \"%s\": %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 "Błąd podczas odwracania przetworzenia nazwy naczelnika Kerberosa \"%s\": "
 "%s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: opcja wymaga parametru - \"%c\"\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: nieprawidłowa opcja - \"%c\"\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Błąd: nieużywany dodatkowy parametr \"%s\".\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Błąd: podano nieużywane dodatkowe parametry.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Podano położenie bazy danych lub pseudonim bez drugiego parametru.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Określono zarówno katalog bazy danych, jak i plik certyfikatu.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr "Nie podano katalogu bazy danych i pseudonimu lub pliku certyfikatu.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Nie można zapisać klucza i certyfikatu do tego samego pliku.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -268,39 +268,39 @@ msgstr ""
 "Zaplecze IPA wymaga użycia opcji -K (nazwy naczelnika), kiedy używana jest "
 "opcja -N (nazwa tematu).\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Nie odnaleziono CA o nazwie \"%s\".\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Błąd podczas ustawiania parametrów żądania.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Dodano nowe żądanie podpisania \"%s\".\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Nie można dodać nowego żądania podpisania.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Dodano nowe żądanie śledzenia \"%s\".\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Nie można dodać nowego żądania śledzenia.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -309,319 +309,369 @@ msgstr ""
 "Nie podano identyfikatora, albo katalogu bazy danych i pseudonimu, albo "
 "pliku certyfikatu.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Zmodyfikowano żądanie \"%s\".\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Nie można zmodyfikować żądania \"%s\".\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Nie odnaleziono żądania dla podanego pseudonimu.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Nie odnaleziono żądania pasującego do parametrów.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Usunięto żądanie \"%s\".\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Nie można usunąć żądania \"%s\".\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Błąd podczas modyfikowania \"%s\".\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Ponowne wysyłanie \"%s\" do \"%s\".\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Ponowne wysyłanie \"%s\".\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Błąd podczas próby wysłania \"%s\" do \"%s\".\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Błąd podczas próby wysłania \"%s\".\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Liczba śledzonych certyfikatów i żądań: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Identyfikator żądania \"%s\":\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tstan: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tbłąd-ca: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tzatkanie: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tpamięć masowa pary kluczy: typ=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "BRAK"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",położenie=\"%s\""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",pseudonim=\"%s\""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",token=\"%s\""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin=\"%s\""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",plik_pinu=\"%s\""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertyfikat: typ=%s,położenie=\"%s\""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\twystawca: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\ttemat: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\twygasa: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "nieznane"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\te-mail: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tnazwa naczelnika: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr "\tAdres IP: "
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tużycie klucza: %s\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tpolecenie pre-save: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tpolecenie post-save: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tścieżka: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tautomatyczne-odnawianie: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA \"%s\":\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttyp-ca: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tpołożenie-pomocnika: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tnastępny-numer-seryjny: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnazwy-znanych-wystawców: \n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - narzędzie kwalifikowania certyfikatów klientów\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Użycie: %s request [opcje]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Wymagane parametry:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Podczas używania bazy NSS do przechowywania danych:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d KAT\tbaza danych NSS dla klucza i certyfikatu\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n NAZWA\tpseudonim dla przechowywania danych opartego na NSS (prawidłowe "
 "tylko z opcją -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAZWA\topcjonalna nazwa tokenu dla przechowywania opartego na NSS "
 "(prawidłowe tylko z opcją -d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Podczas używania plików do przechowywania:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k PLIK\tplik PEM dla klucza prywatnego\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f PLIK\tplik PEM dla certyfikatu (prawidłowe tylko z opcją -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Jeśli klucze mają zostać zaszyfrowane:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p PLIK\tplik przechowujący kod PIN szyfrowania\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\twartość kodu PIN\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Opcjonalne parametry:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Ustawienia obsługiwania certyfikatów:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAZWA\tpseudonim do przydzielenia żądaniu\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr "  -G TYP\ttyp klucza do utworzenia, jeśli jeszcze nie ma żadnego\n"
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g ROZMIAR\trozmiar klucza do utworzenia, jeśli jeszcze nie ma żadnego\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tpróbuje odnowić certyfikat, kiedy zbliża się jego wygaszenie "
 "(domyślnie)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tnie próbuje odnowić certyfikatu, kiedy zbliża się jego wygaszenie\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tużywa podanego CA zamiast domyślnego\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -629,242 +679,260 @@ msgstr ""
 "  -T PROFIL\t\tprosi CAo przetworzenie żądania używając nazwanego profilu "
 "lub szablonu\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parametry do żądania podpisania:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 "  -N NAZWA\tustawia żądaną nazwę tematu (domyślnie: CN=<nazwa_komputera>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U UŻYCIE_ZEWNĘTRZNE\tustawia żądany OID użycia rozszerzonego klucza\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u UŻYCIE-KLUCZA\tustawia żądaną wartość użycia klucza\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAZWA\tustawia żądaną nazwę naczelnika\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D NAZWA_DNS\tustawia żądaną nazwę DNS\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E E-MAIL\tustawia żądany adres e-mail\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A ADRES\tustawia żądany adres IP\n"
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Opcje magistrali:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tłączy się z usługą certmonger przez magistralę systemową\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tłączy się z usługą certmonger przez magistralę sesji\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Inne opcje:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tpolecenie do wykonania przed zapisaniem certyfikatu\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tpolecenie do wykonania po zapisaniu certyfikatu\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tzgłasza wszystkie informacje o błędach\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Użycie: %s start-tracking [opcje]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Podczas modyfikowania istniejącego żądania:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAZWA\tpseudonim istniejącego żądania śledzenia\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Jeśli klucze są zaszyfrowane:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAZWA\tpseudonim do nadania śledzonemu żądaniu\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parametry do żądania podpisania w czasie odnowienia:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U UŻYCIE_ZEWNĘTRZNE\tzastępuje żądany OID użycia rozszerzonego klucza\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAZWA\tzastępuje żądaną nazwę naczelnika\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D NAZWA_DNS\tzastępuje żądaną nazwę DNS\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E E-MAIL\tzastępuje żądany adres e-mail\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A ADRES\tzastępuje żądany adres IP\n"
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Użycie: %s stop-tracking [opcje]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Według identyfikatora żądania:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAZWA\tpseudonim dla śledzonego żądania\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Użycie: %s resubmit [opcje]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f PLIK\tplik PEM dla certyfikatu\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Wartości nowych parametrów dla żądania podpisania:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAZWA\tnowy pseudonim przyznany śledzonemu żądaniu\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tużywa podanego CA zamiast bieżącego\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Użycie: %s list [opcje]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Ogólne opcje:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA\twyświetla tylko żądania i certyfikaty powiązane z tym CA\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\twyświetla informacje tylko o oczekujących żądaniach\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\twyświetla informacje tylko o śledzonych certyfikatach\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Jeśli wybrano konkretne żądanie:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d KATALOG\twyświetla tylko żądania i certyfikaty, które używają tej bazy "
 "danych NSS\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAZWA\twyświetla tylko żądania i certyfikaty, które używają tego "
 "pseudonimu\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f PLIK\twyświetla tylko żądania i certyfikaty przechowywane w tym pliku "
 "PEM\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tłączy się z uslugą certmonger przez magistralę systemową\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tłączy się z usługą certmonger przez magistralę sesji\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Użycie: %s list-cas [opcje]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\twyświetla informacje tylko o CA o tej nazwie\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Użycie: %s request [opcje]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "  -c CA\twyświetla informacje tylko o CA o tej nazwie\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: nierozpoznane polecenie\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "Opcja -t nie może być używana z opcją -K.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "Opcja -k nie może być używana z opcją -K.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "Opcja -K nie może być używana z opcją -k lub -t.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Nie można określić nazwy naczelnika dla żądania podpisania.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Nie można określić położenia serwera XML-RPC CA.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -873,7 +941,7 @@ msgstr ""
 "Błąd podczas ustawiania ccache dla usługi \"gospodarza\" na kliencie "
 "używając domyślnej tablicy kluczy: %s.\n"
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
@@ -881,7 +949,7 @@ msgstr ""
 "Błąd podczas ustawiania ccache dla \"%s\" na kliencie używając domyślnej "
 "tablicy kluczy: %s.\n"
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -890,27 +958,27 @@ msgstr ""
 "Błąd podczas ustawiania ccache dla usługi \"gospodarza\" na kliencie "
 "używając domyślnej tablicy kluczy \"%s\": %s.\n"
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 "Błąd podczas ustawiania ccache dla \"%s\" na kliencie używając domyślnej "
 "tablicy kluczy \"%s\": %s.\n"
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "Błąd podczas ustawiania dla XML-RPC na kliencie.\n"
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Nie można określić położenia serwera XML-RPC CA.\n"
+msgstr "Nie można ustalić położenia serwera LDAP IPA.\n"
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "Nie można określić położenia serwera XML-RPC CA.\n"
+msgstr "Nie można ustalić podstawowego DN informacji domeny na serwerze IPA.\n"
 
 #: src/main.c:120
 #, c-format
@@ -954,7 +1022,7 @@ msgstr "\t-p PLIK    zapisuje PID usługi do pliku\n"
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         wymusza przejście NSS do trybu FIPS\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Wystąpił wewnętrzny błąd."
 
@@ -967,26 +1035,28 @@ msgstr "Nie odnaleziono pasującego wpisu.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Istnieje już CA o pseudonimie \"%s\"."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Nie podano typu przechowywania certyfikatu."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Typ przechowywania certyfikatu \"%s\" nie jest obsługiwany."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Położenie \"%s\" musi być ścieżką bezwzględną."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Nie podano położenia przechowywania certyfikatu."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -995,17 +1065,19 @@ msgstr ""
 "Nie można uzyskać dostępu do położenia nadrzędnego dla \"%s\" z powodu "
 "niewystarczających uprawnień."
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Nadrzędne położenie \"%s\" musi być prawidłowym katalogiem."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Położenie \"%s\" musi być plikiem."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
@@ -1013,21 +1085,22 @@ msgstr ""
 "Nie można uzyskać dostępu do położenia \"%s\" z powodu niewystarczających "
 "uprawnień."
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Położenie \"%s\" musi być katalogiem."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Nie podano pseudonimu certyfikatu."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Istnieje już żądanie o pseudonimie \"%s\"."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
@@ -1035,60 +1108,60 @@ msgstr ""
 "Certyfikat w tym samym położeniu jest już używany przez żądanie o "
 "pseudonimie \"%s\"."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Typ przechowywania klucza \"%s\" nie jest obsługiwany."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "Nie podano położenia przechowywania klucza."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Nie podano pseudonimu klucza."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Klucz w tym samym położeniu jest już używany przez żądanie o pseudonimie \"%s"
 "\"."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Brak obsługi dla typu klucza \"%s\"."
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Nie ma takiego CA."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Nieznane CA \"%s\""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Nierozpoznany parametr lub błędny typ wartości."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr "Błąd podczas przetwarzania parametrów."
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr "Nierozpoznana nazwa właściwości."
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr "Niewystarczający dostęp. Proszę ponowić działanie jako root.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Proszę sprawdzić, czy usługa certmonger została uruchomiona.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr "Proszę sprawdzić, czy usługa certmonger jest ciągle uruchomiona.\n"
diff --git a/po/pt.po b/po/pt.po
index 059e2ea..6ad22bc 100644
--- a/po/pt.po
+++ b/po/pt.po
@@ -1,9 +1,9 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
-# alfalb_mansil <manuela.silva@sky.com>, 2014
+# Manuela Silva <manuela.silva@sky.com>, 2014
 # Miguel Sousa <migueljorgesousa@sapo.pt>, 2012
 # nmartins <nmartins10@gmail.com>, 2011
 # Rui Gouveia <rui.gouveia@gmail.com>, 2011, 2012
@@ -11,22 +11,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Portuguese (http://www.transifex.com/projects/p/certmonger/language/pt/)\n"
+"Language-Team: Portuguese (http://www.transifex.com/projects/p/certmonger/"
+"language/pt/)\n"
+"Language: pt\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: pt\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Não foi possível determinar o nome do servidor do CA.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Incapaz de ler o pedido de assinatura.\n"
@@ -38,9 +39,9 @@ msgstr "Erro ao configurar para XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Erro a analisar a resposta do servidor.\n"
@@ -98,14 +99,17 @@ msgstr ""
 #: src/getcert.c:91
 #, c-format
 msgid "Path \"%s\" is not absolute, attempting to use \"%s\" instead.\n"
-msgstr "O caminho \"%s\" não é absoluto, a tentar utilizar \"%s\" em alternativa.\n"
+msgstr ""
+"O caminho \"%s\" não é absoluto, a tentar utilizar \"%s\" em alternativa.\n"
 
 #: src/getcert.c:96
 #, c-format
 msgid ""
 "Path \"%s\" is not absolute, and there was an error determining the name of "
 "the current directory.\n"
-msgstr "O caminho \"%s\" não é absoluto, e houve um erro ao determinar o nome do directório actual.\n"
+msgstr ""
+"O caminho \"%s\" não é absoluto, e houve um erro ao determinar o nome do "
+"directório actual.\n"
 
 #: src/getcert.c:118
 #, c-format
@@ -137,7 +141,7 @@ msgstr "Memória esgotada.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Erro de ligação ao D-Bus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Verifique se o serviço do bus de mensagens (D-Bus) está a correr.\n"
@@ -172,700 +176,794 @@ msgstr "Recebida resposta de erro do serviço local %s.\n"
 msgid "No response received from %s service.\n"
 msgstr "Não foi recebida uma resposta do serviço %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Erro a inicializar a biblioteca Kerberos: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Não foi possível avaliar o OID \"%s\".\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Erro ao analisar o nome Kerberos principal \"%s\": %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Erro ao analisar novamente o nome Kerberos principal \"%s\": %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: opção requer um argumento -- '%c'\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: opção inválida -- '%c'\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Erro: argumento extra não utilizado \"%s\".\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Erro: foram fornecidos argumentos extra não utilizados.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Localização da base de dados ou nome especificado sem o outro.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
-msgstr "Directório da base de dados e do ficheiro do certificado ambos especificados.\n"
+msgstr ""
+"Directório da base de dados e do ficheiro do certificado ambos "
+"especificados.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
-msgstr "Não foi especificada uma directoria de base de dados e nome ou um ficheiro de certificado.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
+msgstr ""
+"Não foi especificada uma directoria de base de dados e nome ou um ficheiro "
+"de certificado.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Não é possível gravar a chave e o certicifado no mesmo ficheiro.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
-msgstr "O IPA backend necessita o uso da opção -K (nome principal) quando a opção -N (nome do assunto) é usada.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
+msgstr ""
+"O IPA backend necessita o uso da opção -K (nome principal) quando a opção -N "
+"(nome do assunto) é usada.\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Não foi encontrado um CA com o nome \"%s\".\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Erro a definir os argumentos pedidos.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Novo pedido de contratação \"%s\" adicionado.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "O novo pedido de contratação não pode ser adicionado.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Novo pedido de monitorização \"%s\" adicionado.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "O novo pedido de monitorização não pode ser adicionado.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
-msgstr "Nenhum ID, directoria da base de dados e nome ou ficheiro do certificado especificados.\n"
+msgstr ""
+"Nenhum ID, directoria da base de dados e nome ou ficheiro do certificado "
+"especificados.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Pedido \"%s\" modificado.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Pedido \"%s\" não pode ser modificado.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Não foi encontrado pedido com a alcunha especificada.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Nenhum pedido encontrado que corresponda aos argumentos.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Pedido \"%s\" removido.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Pedido \"%s\" não pode ser removido.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Erro a modificar \"%s\".\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Reenviar \"%s\" para \"%s\".\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Reenviar \"%s\".\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Erro a tentar enviar \"%s\" para \"%s\".\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Erro a tentar enviar \"%s\".\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Número de certificados e pedidos a serem monitorizados: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID do pedido '%s':\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\testado: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\terro-ca: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tpreso: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tarmazenamento par de chaves: tipo=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "NONE"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",localização='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",alcunha='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",ficheiro pin='%s'"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertificado: tipo=%s,localização='%s'"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\temissor: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tassunto: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\texpira: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "desconhecido"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\tcorreio electrónico: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tnome principal: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tcomando pré-guardado: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttraçagem: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\trenovação automática: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\ttipo-ca: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tlocalização-ajuda: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tpróximo-número-série: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tnomes-emissores-conhecidos:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - ferramenta de registo do certificado do cliente\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Uso: %s pedido [opções]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Argumentos requeridos:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Se usar uma base de dados NSS para armazenamento:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tBase de dados NSS para a chave e certificado\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
-msgstr "  -n NAME\tnome para o armazenamento NSS (apenas válido com a opção -d)\n"
+msgstr ""
+"  -n NAME\tnome para o armazenamento NSS (apenas válido com a opção -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
-msgstr "  -t NAME\tnome de testemunho opcional para o armazenamento NSS (apenas válido com a opção -d)\n"
+msgstr ""
+"  -t NAME\tnome de testemunho opcional para o armazenamento NSS (apenas "
+"válido com a opção -d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Se usar ficheiros para armazenamento:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE\tFicheiro PEM para a chave privada\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
-msgstr "  -f FILE\tFicheiro PEM para o certificado (apenas válido com a opção -k)\n"
+msgstr ""
+"  -f FILE\tFicheiro PEM para o certificado (apenas válido com a opção -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Se as chaves são para serem encriptadas:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE\tficheiro que contém o PIN de encriptação\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tvalor do PIN\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Argumentos opcionais:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Certificado das configurações:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAME\tnome a atribuir ao pedido\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
-msgstr "  -g SIZE\ttamanho da chave a ser gerada se uma já não estiver em uso\n"
+msgstr ""
+"  -g SIZE\ttamanho da chave a ser gerada se uma já não estiver em uso\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
-msgstr "  -r\t\ttentativa de renovação do certificado quando a expiração se aproxima (por defeito)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+msgstr ""
+"  -r\t\ttentativa de renovação do certificado quando a expiração se aproxima "
+"(por defeito)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
-msgstr "  -R\t\tnão tentar renovar o certificado quando a expiração se aproxima\n"
+msgstr ""
+"  -R\t\tnão tentar renovar o certificado quando a expiração se aproxima\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tusar o CA especificado em vez do por defeito\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parâmetros para o pedido de assinatura:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
-msgstr "  -N NAME\tdefine o nome do assunto pretendido (omissão: CN=<hostname>)\n"
+msgstr ""
+"  -N NAME\tdefine o nome do assunto pretendido (omissão: CN=<hostname>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE\tdefinir a utilização de chave estendida OID pedida\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME\tdefinir nome principal solicitado\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNSNAME\tdefinir o nome de DNS solicitado\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EMAIL\tdefinir o endereço de correio electrónico solicitado\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Opções Bus:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tliga ao serviço certmonger no sistema bus\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tliga ao serviço certmonger no bus de sessão\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Outras opções:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\treportar todos os detalhes de erros\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Uso: %s start-tracking [opções]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Se a modificar um pedido existente:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME\tnome de um pedido de monitorização existente\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Se as chaves forem encriptadas:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME\tnome a dar ao pedido de monitorização\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parâmetros para o pedido de assinatura no tempo de renovação:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
-msgstr "  -U EXTUSAGE\tsobrescreve a utilização de chave estendida OID pedida\n"
+msgstr ""
+"  -U EXTUSAGE\tsobrescreve a utilização de chave estendida OID pedida\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME\tsobrescreve nome principal pedido\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME\tsobrescreve nome DNS pedido\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\tsobrescreve endereço de e-mail pedido\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Uso: %s stop-tracking [options]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Pelo identificador do pedido:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME\tnome para o pedido de monitorização\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Uso: %s resubmit [opções]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE\tficheiro PEM para certificado\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Novos valores do parâmetro para o pedido de assinatura:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME\tnovo nome a dar ao pedido de monitorização\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tusar o CA especificado em vez do actual\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Uso: %s list [opções]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Opções gerais:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA\tlistar apenas pedidos e certificados associados a este CA\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tlista apenas informações sobre pedidos pendentes\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tlistar apenas informação sobre certificados monitorozados\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Se a selecionar um pedido especifico:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
-msgstr "  -d DIR\tlistar apenas pedidos e certificados que utilizem esta base de dados NSS\n"
+msgstr ""
+"  -d DIR\tlistar apenas pedidos e certificados que utilizem esta base de "
+"dados NSS\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
-msgstr "  -n NAME\tlistar apenas pedidos e certificados que utilizem esta alcunha\n"
+msgstr ""
+"  -n NAME\tlistar apenas pedidos e certificados que utilizem esta alcunha\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
-msgstr "  -f FILE\tlistar apenas pedidos e certificados armazenados neste ficheiro PEM\n"
+msgstr ""
+"  -f FILE\tlistar apenas pedidos e certificados armazenados neste ficheiro "
+"PEM\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tliga ao serviço certmonger no sistema bus\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tliga ao serviço certmonger no bus de sessão\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Uso: %s list-cas [opções]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\tlistar apenas informação sobre o CA com este nome\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Uso: %s pedido [opções]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "  -c CA\tlistar apenas informação sobre o CA com este nome\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: comando não reconhecido\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "A opção -t não pode ser utilizada com a opção -K.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "A opção -k não pode ser utilizada com a opção -K.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "A opção -K não pode ser utilizada com as opções -k ou -t.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Incapaz de determinar o nome principal para o pedido de assinatura.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Incapaz de determinar a localização do servidor XMLRPC do CA.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -893,7 +991,8 @@ msgstr "\t-f         converter em daemon\n"
 
 #: src/main.c:128
 msgid "\t-b TIMEOUT bus-activated, idle timeout\n"
-msgstr "\t-b TEMPORIZADOR activado-por-barramento, temporizador de inactividade\n"
+msgstr ""
+"\t-b TEMPORIZADOR activado-por-barramento, temporizador de inactividade\n"
 
 #: src/main.c:129
 msgid "\t-B         don't use an idle timeout\n"
@@ -911,7 +1010,7 @@ msgstr "\t-p FIC    escrever PID do serviço para ficheiro\n"
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Ocorreu um erro interno."
 
@@ -924,120 +1023,128 @@ msgstr "Nenhuma entrada correspondente encontrada.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Já existe um CA com nome de utilizador \"%s\"."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Tipo de armazenamento do certificado não especificado."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Tipo de armazenamento do certificado \"%s\" não suportado."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "A localização \"%s\" tem de ser um caminho absoluto."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Localização de armazenamento do certificado não especificado."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "O pai da localização \"%s\" tem de ser uma directoria válida."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "A localização \"%s\" tem de ser um ficheiro."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "A localização \"%s\" tem de ser uma directoria."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Nome do certificado não especificado."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Já existe um pedido com o nome \"%s\"."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
-msgstr "Certificado na mesma localização já é utilizado para pedidos com alcunha \"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
+msgstr ""
+"Certificado na mesma localização já é utilizado para pedidos com alcunha \"%s"
+"\"."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Tipo de armazenamento da chave \"%s\" não suportado."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "Localização de armazenamento da chave não especificado."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Nome da chave não especificado."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
-msgstr "Chave na mesma localização já é utilizada para pedidos com alcunha \"%s\"."
+msgstr ""
+"Chave na mesma localização já é utilizada para pedidos com alcunha \"%s\"."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "CA desconhecido."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Autoridade de certificação \"%s\" desconhecida."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Parâmetro desconhecido ou tipo de valor incorrecto."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/pt_BR.po b/po/pt_BR.po
index 6304735..363e5be 100644
--- a/po/pt_BR.po
+++ b/po/pt_BR.po
@@ -3,30 +3,30 @@
 # This file is distributed under the same license as the PACKAGE package.
 #
 # Translators:
-# Cleiton cleitonlima <cleitoncfl@yahoo.com.br>, 2011
-# fabioolive <fabio.olive@gmail.com>, 2013
+# Cleiton Lima <cleitoncfl@yahoo.com.br>, 2011
+# Fábio Olivé Leite <fabio.olive@gmail.com>, 2013
 # leandro <lcavalcanti.almeida@gmail.com>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Portuguese (Brazil) (http://www.transifex.com/projects/p/"
-"fedora/language/pt_BR/)\n"
+"certmonger/language/pt_BR/)\n"
 "Language: pt_BR\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Não foi possível determinar nome da máquina do CA.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Não foi possível ler pedido de assinatura.\n"
@@ -38,9 +38,9 @@ msgstr "Erro de criação para XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Erro ao analisar resposta do servidor.\n"
@@ -71,9 +71,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Erro de criação para XMLRPC.\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -139,7 +139,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr "Erro ao conectar-se ao DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -178,76 +178,76 @@ msgstr "Recebida reposta com erro do serviço local %s.\n"
 msgid "No response received from %s service.\n"
 msgstr "Nenhuma resposta recebida do serviço %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Erro ao inicializar biblioteca Kerberos: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Não foi possível avaliar OID \"%s\".\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Erro ao analisar nome principal do Kerberos \"%s\": %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Erro a não analisar o nome principal do Kerberos \"%s\":%s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Erro: Argumentos extras não utilizados foram fornecidos.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Localização do banco de dados ou login especificado sem o outro\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 "Diretório do banco de dados e arquivo de certificado, ambos especificados\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
@@ -255,12 +255,12 @@ msgstr ""
 "Nenhum diretório e login de banco de dados ou arquivo de certificado "
 "especificado.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "A chave e o certificado não podem ser salvos no mesmo arquivo.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -269,41 +269,41 @@ msgstr ""
 "O backend IPA requer o uso da opção -K (nome do principal) quando a opção -N "
 "(nome do subject) é usada.\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Nenhum CA com o nome \"%s\" encontrado.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Erro ao configurar argumentos do pedido.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Novo pedido de assinatura \"%s\" adicionado.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "O novo pedido de assinatura não pôde ser adicionado.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Nova requisição de rastreamento \"%s\" adicionada.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 "Nova requisição de rastreamento não foi adicionada.\n"
 "\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -312,581 +312,648 @@ msgstr ""
 "Nenhum ID, diretório da base de dados e nome de usuário ou arquivo de "
 "certificados especificados.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Pedido \"%s\" modificado.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Requisição \"%s\" não podia ser modificada.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Nenhuma requisição encontrada que tenha argumentos correspondentes.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Pedido \"%s\" removido.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Pedido \"%s\" não pôde ser removido.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Erro ao modificar \"%s\".\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Reenviando \"%s\" para \"%s\".\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Reenviando \"%s\".\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Erro ao tentar enviar \"%s\" para \"%s\".\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Erro ao tentar enviar \"%s\".\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Números de certificados e pedidos sendo rastreados: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "ID do Pedido '%s':\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\"status:%s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\"ca-error:%s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\ttravado: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "NADA"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\temitente: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tsubject: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\texpiração: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "desconhecido"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\temail: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tnome do principal: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-renovar: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - ferramenta de inscrição de certificado cliente\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Uso: %s pedido [opções]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Argumentos necessários:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "Se estiver utilizando uma base de dados NSS para armazenamento:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR\tBanco de dados NSS para chave e certificado\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Se estiver utilizando arquivos para armazenamento:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Se as chaves devem ser criptografadas:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Argumentos opcionais:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Configurações de manejo de certificado:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Outras opções:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Se estiver modificando um pedido existente:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Uso: %s reenvio [opções]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Novos valores de parâmentro para o pedido de assinatura:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Uso: %s lista [opções]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Opções gerais:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Se selecionado um pedido específico:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Uso: %s pedido [opções]\n"
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: comando não reconhecido\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Não foi possível determinar a localização do servidor XMLRPC do CA.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Não foi possível determinar a localização do servidor XMLRPC do CA.\n"
+msgstr ""
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "Não foi possível determinar a localização do servidor XMLRPC do CA.\n"
+msgstr ""
 
 #: src/main.c:120
 #, c-format
@@ -929,7 +996,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Um erro interno ocorreu."
 
@@ -942,120 +1009,125 @@ msgstr "Nenhuma entrada compatível encontrada.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Tipo de armazenamento de certificado não especificado."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Localização do armazenamento de certificado não especificada."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "A localização \"%s\" deve ser um arquivo."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "A localização \"%s\" deve ser um diretório."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Nome de usuário do certificado não especificado."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Já existe um pedido com o nome de usuário \"%s\"."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Tipo de armazenamento de chave \"%s\" não suportado."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "A localização de armazenamento da chave não foi especificada."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Nome de usuário da chave não foi especificado."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Autoridade do certificado \"%s\" não conhecida."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Parâmetro não reconhecido ou tipo de valor errado."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr "Permissões insuficientes. Por favor tente novamente como root.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Por favor verifique se o serviço certmonger foi iniciado.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr "Por favor verifique se o serviço certmonger ainda está rodando.\n"
diff --git a/po/ro.po b/po/ro.po
index 51819d2..060f33a 100644
--- a/po/ro.po
+++ b/po/ro.po
@@ -7,11 +7,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Romanian (http://www.transifex.com/projects/p/fedora/language/"
-"ro/)\n"
+"Language-Team: Romanian (http://www.transifex.com/projects/p/certmonger/"
+"language/ro/)\n"
 "Language: ro\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=(n==1?0:(((n%100>19)||((n%100==0)&&(n!=0)))?"
 "2:1));\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ru.po b/po/ru.po
index f2608ec..e8212c7 100644
--- a/po/ru.po
+++ b/po/ru.po
@@ -8,11 +8,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Russian (http://www.transifex.com/projects/p/fedora/language/"
-"ru/)\n"
+"Language-Team: Russian (http://www.transifex.com/projects/p/certmonger/"
+"language/ru/)\n"
 "Language: ru\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -20,12 +20,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Невозможно определить имя CA\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Невозможно прочесть запрос на подписание.\n"
@@ -37,9 +37,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -138,7 +138,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr "Ошибка подключения к DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -174,126 +174,126 @@ msgstr "Получен ошибочный ответ от службы %s.\n"
 msgid "No response received from %s service.\n"
 msgstr "От службы %s не был получен ответ.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Ошибка инициализации библиотеки Kerberos: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Не определены каталог базы данных и файл сертификата.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 "Не определены ни каталог базы данных, ни никнейм или файл сертификата.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Ключи и сертификат не могут быть сохранены в один файл.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "CA с именем \"%s\" не найден.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Ошибка установки аргументов запроса.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Новый запрос на подписание \"%s\" добавлен.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Новый запрос на подписание не может быть добавлен.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -301,578 +301,645 @@ msgid ""
 msgstr ""
 "Не были опрделены ни ID базы данных, ни никнейм или файл сертификата.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Запрос \"%s\" изменен.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Запрос \"%s\" не может быть изменен.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Запрос \"%s\" удален.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Запрос \"%s\" не может быть удален.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Ошибка изменения \"%s\".\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Запрос ID '%s':\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>статус: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-ошибка: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>CA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>тема: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>истекает: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "неизвестный"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>email: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>dns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-тип: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Необходимый аргументы:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* В случае использования для хранения базы данных NSS:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* В случае использования файлов для хранения:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* В случае, если ключи шифруются:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Необязательный аргументы:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Новые значения параметров запроса на подписание:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Основные опции:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: неизвестная команда\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Невозможно определить имя CA\n"
+msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -918,7 +985,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Произошла внутренняя ошибка."
 
@@ -931,120 +998,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "CA  с именем \"%s\" уже существует."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ru_RU.po b/po/ru_RU.po
index 0bf2250..2f5fc24 100644
--- a/po/ru_RU.po
+++ b/po/ru_RU.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Russian (Russia) (http://www.transifex.com/projects/p/fedora/"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/si.po b/po/si.po
index 9ecda22..78ae9ba 100644
--- a/po/si.po
+++ b/po/si.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Sinhala (http://www.transifex.com/projects/p/fedora/language/"
-"si/)\n"
+"Language-Team: Sinhala (http://www.transifex.com/projects/p/certmonger/"
+"language/si/)\n"
 "Language: si\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/sk.po b/po/sk.po
index b0deb54..f02a16a 100644
--- a/po/sk.po
+++ b/po/sk.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Slovak (http://www.transifex.com/projects/p/fedora/language/"
-"sk/)\n"
+"Language-Team: Slovak (http://www.transifex.com/projects/p/certmonger/"
+"language/sk/)\n"
 "Language: sk\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/sl.po b/po/sl.po
index b703c3a..ecdf83c 100644
--- a/po/sl.po
+++ b/po/sl.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Slovenian (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Slovenian (http://www.transifex.com/projects/p/certmonger/"
 "language/sl/)\n"
 "Language: sl\n"
 "MIME-Version: 1.0\n"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=4; plural=(n%100==1 ? 0 : n%100==2 ? 1 : n%100==3 || n"
 "%100==4 ? 2 : 3);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/sq.po b/po/sq.po
index 8672bdd..fcc8069 100644
--- a/po/sq.po
+++ b/po/sq.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Albanian (http://www.transifex.com/projects/p/fedora/language/"
-"sq/)\n"
+"Language-Team: Albanian (http://www.transifex.com/projects/p/certmonger/"
+"language/sq/)\n"
 "Language: sq\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/sr.po b/po/sr.po
index 02f5b29..0953acd 100644
--- a/po/sr.po
+++ b/po/sr.po
@@ -7,11 +7,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Serbian (http://www.transifex.com/projects/p/fedora/language/"
-"sr/)\n"
+"Language-Team: Serbian (http://www.transifex.com/projects/p/certmonger/"
+"language/sr/)\n"
 "Language: sr\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/sr@latin.po b/po/sr@latin.po
index 281343c..399c1b6 100644
--- a/po/sr@latin.po
+++ b/po/sr@latin.po
@@ -7,11 +7,11 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Serbian (Latin) (http://www.transifex.com/projects/p/fedora/"
-"language/sr@latin/)\n"
+"Language-Team: Serbian (Latin) (http://www.transifex.com/projects/p/"
+"certmonger/language/sr@latin/)\n"
 "Language: sr@latin\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/sv.po b/po/sv.po
index 7163927..e99ac5f 100644
--- a/po/sv.po
+++ b/po/sv.po
@@ -8,23 +8,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Swedish (http://www.transifex.com/projects/p/fedora/language/"
-"sv/)\n"
+"Language-Team: Swedish (http://www.transifex.com/projects/p/certmonger/"
+"language/sv/)\n"
 "Language: sv\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Det går inte att avgöra värdnamnet för CA:n.\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Kan inte läsa signeringsbegäran.\n"
@@ -36,9 +36,9 @@ msgstr "Fel vid inställning av XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Fel vid tolkning av svar från servern.\n"
@@ -69,9 +69,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Ingen profil/mall (-T) angiven, och inget standardvärde är känt.\n"
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Fel vid inställning av XMLRPC.\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -139,7 +139,7 @@ msgstr "Slut på minne.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Fel vid anslutning till DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Kontrollera att tjänsten meddelandebuss (D-Bus) kör.\n"
@@ -174,86 +174,86 @@ msgstr "Mottog felsvar från den lokala tjänsten %s.\n"
 msgid "No response received from %s service.\n"
 msgstr "Inget svar mottaget från tjänsten %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Fel vid initiering av Kerberos bibliotek: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Okänd nyckelanvändning ”%s”.\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Det gick inte att beräkna OID ”%s”.\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fel vid tolkning av Kerberos-huvudnamn ”%s”: %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Fel vid avtolkning av Kerberos-huvudnamn ”%s”: %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: flaggan kräver ett argument -- ”%c”\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: felaktig flagga -- ”%c”\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Fel: oanvänt extra argument ”%s”.\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Fel: oanvända extra argument gavs.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "Databasplats eller smeknamn angivet utan den andra.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Databaskatalog och certifikatfil båda angivna.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr "Ingen av databaskatalog och smeknamn eller certifikatfil angiven.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Nyckeln och certifikatet kan inte båda sparas i samma fil.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -262,39 +262,39 @@ msgstr ""
 "IPA-backänden kräver användning av -K-flaggan (huvudnamn) när -N-flaggan "
 "(ämnesnamn) används.\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Ingen CA med namnet ”%s” hittades.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Fel vid inställning av argument till begäran.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Nya begäran om signering ”%s” tillagd.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Nya begäran om signering kunde inte läggas till.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Ny spårningsbegäran ”%s” tilllagd.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Nya spårningsbegäran kunde inte läggas till.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -303,318 +303,368 @@ msgstr ""
 "Ingen av ID eller databaskatalog och smeknamn eller certifikatfil filen "
 "angiven.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Begäran ”%s” ändrad.\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Begäran ”%s” kunde inte ändras.\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Ingen begäran hittades med angivet smeknamn.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Ingen begäran hittades som matchade argumenten.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Begäran ”%s” borttagen.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Begäran ”%s” kunde inte tas bort.\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Fel när ”%s” ändrades.\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Skickar om ”%s” till ”%s”.\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Skickar om ”%s”.\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Fel vid försök att skicka ”%s” till ”%s”.\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Fel vid försök att skicka ”%s”.\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Antalet certifikat och spårade begäran: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Begärans-id ”%s”:\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tstatus: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-fel: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tfastnat: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tnyckelparslagring: typ=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "INGEN"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",plats=”%s”"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",smeknamn=”%s”"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",symbol=”%s”"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin=”%s”"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pin-fil=”%s”"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tcertifikat: typ=%s,plats=”%s”"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tutgivare: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tämne: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tlöper ut: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "okänt"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\te-post: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\thuvudnamn: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tnyckelanvändning: %s\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tkommando före det sparas: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tkommando efter det sparas: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tspår: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tauto-förnyelse: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA ”%s”:\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-typ: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\thjälparplats: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tnästa-serienummer: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tkänt utfärdarnamn:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - registreringsverktyg för klientcertifikat\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Användning: %s request [flaggor]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Obligatoriska argument:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Om du använder en NSS-databas för lagring:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d KAT\tNSS-databas för nyckel och cert\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr "  -n NAMN\tsmeknamn för NSS-baserad lagring (endast giltigt med -d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t NAMN\tfrivilligt symbolnamn för NSS-baserad lagring (endast giltig med -"
 "d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Om du använder filer för lagring:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FIL\tPEM-fil för privat nyckel\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FIL\tPEM-fil för certifikat (endast giltigt med -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Om nycklar skall krypteras:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FIL\tfil som håller PIN för kryptering\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN-värde\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Valfria argument:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Inställningar för certifikathantering:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I NAMN\tsmeknamn att tilldela till begäran\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g STORLEK\tstorlek på nyckel som skall genereras om det inte redan finns "
 "en\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tförsök att förnya certifikatet när utgångsdatumet närmar sig "
 "(standard)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tförsök inte förnya certifikatet när utgångsdatumet närmar sig\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA\t\tanvänd angiven CA istället för standard\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -622,276 +672,294 @@ msgstr ""
 "  -T PROFIL\tbe CA:n att bearbeta begäran med användning av den angivna "
 "profilen eller mallen\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Parametrar för signeringsbegäran:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N NAMN\tställ in begärt ämnesnamn (standard: CN=<värdnamn>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTANV\tställ in begärd förlängd nyckelanvändning-OID\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u NYCELANVÄNDNING\tsätt angivet värde på nyckelanvändning\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAMN\tställ in begärt huvudnamn\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D DNS-NAMN\tställ in begärt DNS-namn\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E EPOST\tställ in begärd e-postadress\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Bussflaggor:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\t\tanslut till tjänsten certmonger på systembussen\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\t\tanslut till tjänsten certmonger på sessionsbussen\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Andra flaggor:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tkommando att köra före certifikatet sparas\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tkommando att köra efter certifikatet sparas\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\trapportera alla detaljer om fel\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Användning: %s start-tracking [flaggor]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* Om du ändrar en befintlig begäran:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAMN\tsmeknamn på en befintlig spårningsbegäran\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Om nycklarna är krypterade:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAMN\tsmeknamn att ge på spårningbegäran\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Parametrar för signeringsbegäran vid förnyelsetidpunkten:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTANV\tåsidosätt begärd förlängd nyckelanvändning-OID\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAMN\tåsidosätt begärt huvudnamn\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNS-NAMN\tåsidosätt begärt DNS-namn\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL\tåsidosätt begärd e-postadress\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Användning: %s stop-tracking [flaggor]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* Enligt identifierare för begäran:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAMN\tsmeknamn för spårningsbegäran\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Användning: %s resubmit [flaggor]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FIL\tPEM-fil för certifikat\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Nya parametervärden för signeringsbegäran:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAMN\tnytt smeknamn för att ge till spårningsbegäran\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA\t\tanvänd den angivna CA:n istället för den nuvarande\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Användning: %s list [flaggor]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Allmänna flaggor:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\tlista endast begäran och certifikat associerade med denna CA\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tlista endast information om utestående begäran\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t\tlista endast information om spårade certifikat\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* Om du väljer en viss begäran:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d KAT\tlista endast begäran och certifikat som använder denna NSS-"
 "databas\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n NAMN\tlista endast begäran och certifikat som använder detta smeknamn\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f FIL\tlista endast begäran och certifikat lagrade i denna PEM-fil\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S\tanslut till tjänsten certmonger på systembussen\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s\tanslut till tjänsten certmonger på sessionsbussen\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Användning: %s list-cas [flaggor]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA\tlista endast information om CA:n med detta namn\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Användning: %s request [flaggor]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "  -c CA\tlista endast information om CA:n med detta namn\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: okänt kommando\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "Flaggan -t kan inte användas med flaggan -K.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "Flaggan -k kan inte användas med flaggan -K.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "Flaggan -K kan inte användas med vare sig flaggan -k eller -t.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "Det går inte att avgöra huvudnamn för signeringsbegäran.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Det går inte att bestämma plats för CA:ns XMLRPC-server.\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Det går inte att bestämma plats för CA:ns XMLRPC-server.\n"
+msgstr ""
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "Det går inte att bestämma plats för CA:ns XMLRPC-server.\n"
+msgstr ""
 
 #: src/main.c:120
 #, c-format
@@ -934,7 +1002,7 @@ msgstr "\t-p FIL     skriv tjänstens PID till filen\n"
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         tvinga in NSS i FIPS-läge\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Ett internt fel har uppstått."
 
@@ -947,121 +1015,126 @@ msgstr "Inga matchande post funnen.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Det finns redan en CA med smeknamnet ”%s”."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Lagringstyp för certifikat inte angiven."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Lagringstyp ”%s” för certifikat stödjs inte."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Platsen ”%s” måste vara en absolut sökväg."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Lagringsplats för certifikat inte angiven."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Förälder till platsen ”%s” måste vara en giltig katalog."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Platsen ”%s” måste vara en fil."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Platsen ”%s” måste vara en katalog."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Certifikatsmeknamn inte angivet."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Det finns redan en begäran med smeknamnet ”%s”."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Certifikat på samma plats används redan av av begäran med smeknamnet ”%s”."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Nyckellagringstypen ”%s” stödjs inte."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "Nyckellagringsplats inte angiven."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Nyckelsmeknamn inte angivet."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr "Nyckel på samma plats används redan av begäran med smeknamnet ”%s”."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Ingen sådan CA."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Certifikatmyndighet ”%s” inte känd."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Okända parameter eller fel värdetyp."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr "Otillräckliga rättigheter.  Försök åtgärden igen som root.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Kontrollera att tjänsten certmonger har startats.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr "Kontrollera att tjänsten certmonger fortfarande kör.\n"
diff --git a/po/ta.po b/po/ta.po
index 9fa63a9..16bbc2c 100644
--- a/po/ta.po
+++ b/po/ta.po
@@ -8,23 +8,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Tamil (http://www.transifex.com/projects/p/fedora/language/"
-"ta/)\n"
+"Language-Team: Tamil (http://www.transifex.com/projects/p/certmonger/"
+"language/ta/)\n"
 "Language: ta\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>CA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ta_IN.po b/po/ta_IN.po
index ec2c41e..80e6c5b 100644
--- a/po/ta_IN.po
+++ b/po/ta_IN.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Tamil (India) (http://www.transifex.com/projects/p/fedora/"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/te.po b/po/te.po
index 230a160..1a858dd 100644
--- a/po/te.po
+++ b/po/te.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Telugu (http://www.transifex.com/projects/p/fedora/language/"
-"te/)\n"
+"Language-Team: Telugu (http://www.transifex.com/projects/p/certmonger/"
+"language/te/)\n"
 "Language: te\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/tg.po b/po/tg.po
index ed66905..ba87e57 100644
--- a/po/tg.po
+++ b/po/tg.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Tajik (http://www.transifex.com/projects/p/fedora/language/"
-"tg/)\n"
+"Language-Team: Tajik (http://www.transifex.com/projects/p/certmonger/"
+"language/tg/)\n"
 "Language: tg\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/th.po b/po/th.po
index 0f351bc..c157e8a 100644
--- a/po/th.po
+++ b/po/th.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Thai (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Thai (http://www.transifex.com/projects/p/certmonger/language/"
 "th/)\n"
 "Language: th\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/tl.po b/po/tl.po
index 65e3b90..fe79edf 100644
--- a/po/tl.po
+++ b/po/tl.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Tagalog (http://www.transifex.com/projects/p/fedora/language/"
-"tl/)\n"
+"Language-Team: Tagalog (http://www.transifex.com/projects/p/certmonger/"
+"language/tl/)\n"
 "Language: tl\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/tr.po b/po/tr.po
index 5a56c57..f93bbed 100644
--- a/po/tr.po
+++ b/po/tr.po
@@ -1,29 +1,30 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 # Hasan Alp İNAN <hasanalpinan@gmail.com>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Turkish (http://www.transifex.com/projects/p/certmonger/language/tr/)\n"
+"Language-Team: Turkish (http://www.transifex.com/projects/p/certmonger/"
+"language/tr/)\n"
+"Language: tr\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: tr\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,700 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>durum: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-hatası: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>CA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>eposta: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>dns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s':\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "<span class=\"whitespace other\" title=\"Tab\">»</span>ca-tipi: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -908,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -921,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/uk.po b/po/uk.po
index 21e007f..8aa4a97 100644
--- a/po/uk.po
+++ b/po/uk.po
@@ -10,10 +10,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-09 05:18+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:25+0000\n"
 "Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
-"Language-Team: Ukrainian (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Ukrainian (http://www.transifex.com/projects/p/certmonger/"
 "language/uk/)\n"
 "Language: uk\n"
 "MIME-Version: 1.0\n"
@@ -22,12 +22,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "Не вдалося визначити назву вузла служби сертифікації (CA).\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "Не вдалося прочитати запит щодо підпису.\n"
@@ -39,9 +39,9 @@ msgstr "Помилка встановлення XMLRPC.\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "Помилка обробки відповіді сервера.\n"
@@ -75,9 +75,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "Не вказано профілю або шаблону (-T), типове значення також невідоме.\n"
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "Помилка встановлення XMLRPC.\n"
+msgstr "Помилка під час спроби завершення роботи NSS.\n"
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -144,7 +144,7 @@ msgstr "Не вистачає пам'яті.\n"
 msgid "Error connecting to DBus.\n"
 msgstr "Помилка під час спроби встановлення з’єднання з DBus.\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "Будь ласка, перевірте, чи працює служба каналу повідомлень (D-Bus).\n"
@@ -179,89 +179,89 @@ msgstr "Отримано повідомлення про помилку від �
 msgid "No response received from %s service.\n"
 msgstr "Не отримано відповіді від служби %s.\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "Помилка під час ініціалізації бібліотеки Kerberos: %s.\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr "Підтримки створення ключів «%s» не передбачено.\n"
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr "Серед відомих типів ключів такі:"
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "Нерозпізнане значення використання ключа «%s».\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "Не вдалося визначити OID «%s».\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Помилка під час обробки реєстраційного запису Kerberos «%s»: %s.\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "Помилка під час пакування реєстраційного запису Kerberos «%s»: %s.\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: разом з параметром слід вказати аргумент -- «%c»\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: некоректний параметр — «%c»\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "Помилка: зайвий аргумент «%s».\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "Помилка: було вказано невикористовувані зайві аргументи.\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 "Вказано адресу бази даних або псевдонім без визначення іншого необхідного "
 "елемента.\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "Одночасно вказано каталог бази даних і файл сертифіката.\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 "Не вказано ні каталогу бази даних з псевдонімом, ні файла сертифіката.\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "Ключ і сертифікат не можна зберігати у одному файлі.\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
@@ -270,39 +270,39 @@ msgstr ""
 "Сервер IPA потребує використання параметра -K (назви реєстраційного запису), "
 "якщо використано параметр -N (призначення).\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "Не виявлено служби сертифікації (CA) з назвою «%s».\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "Помилка під час спроби встановлення параметрів запиту.\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "Додано новий запит «%s» щодо підписування.\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "Не вдалося додати новий запит щодо підписування.\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "Додано новий запит «%s» щодо стеження.\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "Не вдалося додати новий запит щодо стеження.\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
@@ -311,323 +311,373 @@ msgstr ""
 "Не вказано ні ідентифікатора, ні каталогу бази даних з псевдонімом, ні файла "
 "сертифіката.\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "Змінено запит «%s».\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "Не вдалося змінити запит «%s».\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "Не виявлено запиту з вказаним псевдонімом.\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "Запиту, що відповідає аргументам, не виявлено.\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "Запит «%s» вилучено.\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "Не вдалося вилучити запит «%s».\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "Помилка під час спроби змінити «%s».\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "Повторне надсилання «%s» до «%s».\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "Повторне надсилання «%s».\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "Помилка під час спроби надсилання «%s» до «%s».\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "Помилка під час спроби надсилання «%s».\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "Кількість сертифікатів та запитів, за якими ведеться стеження: %d.\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "Ідентифікатор запиту «%s»:\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\tстан: %s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-помилка: %s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "\tприв’язка: %s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "\tсховище пар ключів: тип=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "Немає"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",розташування=«%s»"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",псевдонім=«%s»"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",ключ=«%s»"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",пін-код=«%s»"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",пін-файл=«%s»"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\tсертифікат: тип=%s,розташування=«%s»"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA: %s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "\tвидавець: %s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "\tпризначення: %s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\tзавершення дії: %s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "невідоме"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\tел. пошта: "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns: "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tреєстраційний запис: "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr "\tIP-адреса: "
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\tвикористання ключа: %s\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku: "
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\tкоманда до збереження: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\tкоманда після збереження: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\tстеження: %s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\tавтооновлення: %s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "Служба сертифікації «%s»:\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-тип: %s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\tадреса допоміжної програми: %s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\tнаступний серійний номер: %s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tвідомі назви видавця:\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s — інструмент реєстрації клієнтських сертифікатів\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "Використання: %s request [параметри]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "Обов’язкові аргументи:\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* Якщо для зберігання даних використовується база даних NSS:\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d КАТАЛОГ\tБаза даних ключів і сертифікатів NSS\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -n НАЗВА\tпсевдонім сховища на основі NSS (працюватиме, лише якщо вказано -"
 "d)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t НАЗВА\tдодаткова назва ключа до заснованого на NSS сховища "
 "(працюватиме, лише якщо вказано -d)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* Якщо для зберігання даних використовуються файли:\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k ФАЙЛ\tФайл PEM закритого ключа\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f ФАЙЛ\tФайл PEM сертифіката (працюватиме, лише якщо вказано -k)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* Якщо ключі слід зашифрувати:\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p ФАЙЛ\tФайл, у якому зберігається PIN-код шифрування\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tЗначення PIN-коду шифрування\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "Необов’язкові аргументи:\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* Параметри обробки сертифікатів:\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr "  -I НАЗВА\tпсевдонім, який слід пов’язати з запитом\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 "  -G ТИП\tтип ключа, який слід створити, якщо не буде виявлено готового\n"
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 "  -g РОЗМІР\tрозмір ключа, який слід створити, якщо не буде виявлено "
 "готового, у бітах\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 "  -r\t\tСпробувати оновити сертифікат, якщо наближається завершення строку "
 "дії (типова поведінка)\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 "  -R\t\tНе намагатися оновити сертифікат, якщо наближається завершення "
 "строку дії\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 "  -c CA\t\tвикористовувати вказану службу сертифікації (CA), а не типову\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
@@ -635,256 +685,276 @@ msgstr ""
 "  -T ПРОФІЛЬ\tпопросити CA обробити запит з використанням вказаного профілю "
 "або шаблона\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* Параметри запиту щодо підписування:\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N НАЗВА\tВстановити бажане призначення (Типово: CN=<назва вузла>)\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 "  -U ДОД.ВИКОР.\tВстановити додаткове використання ключа за допомогою OID\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u ВИКОРИСТАННЯ встановити вказане значення використання ключа\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K НАЗВА\tВстановити вказану назву реєстраційного запису\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "  -D НАЗВА-DNS\tвстановити вказану назву за DNS\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "  -E ЕЛ.ПОШТА\tвстановити вказану адресу електронної пошти\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr "  -A АДРЕСА\tвстановити вказану IP-адресу\n"
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* Параметри каналу зв’язку:\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 "  -S\t\tВстановити зв’язок зі службою certmonger за допомогою системного "
 "каналу\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 "  -s\t\tВстановити зв’язок зі службою certmonger за допомогою каналу сеансу\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* Інші параметри:\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\tкоманда, яку слід виконати до збереження сертифіката\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\tкоманда, яку слід виконати після збереження сертифіката\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\tповідомляти про всі дані щодо помилок\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "Використання: %s start-tracking [параметри]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* У разі зміни існуючого запиту:\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i НАЗВА\tПсевдонім існуючого запиту щодо стеження\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* Якщо ключі зашифровано:\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I НАЗВА\tПсевдонім, який слід пов’язати з запитом щодо стеження\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* Параметри запиту щодо підписування під час оновлення:\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 "  -U ДОД.ВИКОР.\tПеревизначити додаткове використання ключа за допомогою "
 "OID\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K НАЗВА\tПеревизначити вказану назву реєстраційного запису\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D НАЗВА-DNS\tПеревизначити вказану назву за DNS\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E ЕЛ.ПОШТА\tПеревизначити вказану адресу електронної пошти\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr "  -A АДРЕСА\tперевизначити вказану IP-адресу\n"
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "Використання: %s stop-tracking [параметри]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* За ідентифікатором запиту:\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i НАЗВА\tПсевдонім запиту щодо стеження\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "Використання: %s resubmit [параметри]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f ФАЙЛ\tФайл PEM сертифіката\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* Нові значення параметрів запиту щодо підписування:\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 "  -I НАЗВА\tНовий псевдонім, який слід пов’язати з запитом щодо стеження\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 "  -c CA\t\tВикористовувати вказану службу сертифікації (CA), а не поточну\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "Використання: %s list [параметри]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* Загальні параметри:\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 "  -c CA\tПоказати список лише тих запитів та сертифікатів, які пов’язано з "
 "вказаною службою сертифікації (CA)\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r\tПоказати лише відомості щодо нетипових запитів\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 "  -t\tПоказати лише відомості щодо сертифікатів, за якими ведеться стеження\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* У разі вибору певного запиту:\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d КАТАЛОГ\tпоказувати список лише тих запитів і сертифікатів, які "
 "використовують цю базу даних NSS\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -d НАЗВА\tпоказувати список лише тих запитів і сертифікатів, які "
 "використовують цю назву\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f ФАЙЛ\tпоказувати список лише тих запитів і сертифікатів, які "
 "зберігаються у цьому файлі PEM\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 "  -S\tВстановити зв’язок зі службою certmonger за допомогою системного "
 "каналу\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 "  -s\tВстановити зв’язок зі службою certmonger за допомогою каналу сеансу\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "Використання: %s list-cas [параметри]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 "  -c CA\tПоказати лише відомості щодо служби сертифікації (CA) з вказаною "
 "назвою\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "Використання: %s request [параметри]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+"  -c CA\tПоказати лише відомості щодо служби сертифікації (CA) з вказаною "
+"назвою\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s: невідома команда\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "Параметр -t не можна використовувати разом з параметром -K.\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "Параметр -k не можна використовувати разом з параметром -K.\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "Параметр -K не можна використовувати разом з параметрами -k і -t.\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 "Не вдалося визначити назву реєстраційного запису запиту щодо підписування.\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "Не вдалося визначити адресу сервера XMLRPC служби сертифікації (CA).\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
@@ -893,7 +963,7 @@ msgstr ""
 "Помилка встановлення ccache для служби «host» на боці клієнта за допомогою "
 "типового сховища ключів: %s.\n"
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
@@ -901,7 +971,7 @@ msgstr ""
 "Помилка встановлення ccache для «%s» на боці клієнта за допомогою типової "
 "таблиці ключів: %s.\n"
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
@@ -910,27 +980,27 @@ msgstr ""
 "Помилка встановлення ccache для служби «host» на боці клієнта за допомогою "
 "сховища ключів «%s»: %s.\n"
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 "Помилка встановлення ccache для «%s» на боці клієнта за допомогою сховища "
 "ключів «%s»: %s.\n"
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr "Помилка встановлення XMLRPC на боці клієнта.\n"
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "Не вдалося визначити адресу сервера XMLRPC служби сертифікації (CA).\n"
+msgstr "Не вдалося визначити розташування сервера LDAP IPA.\n"
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "Не вдалося визначити адресу сервера XMLRPC служби сертифікації (CA).\n"
+msgstr "Не вдалося визначити базовий DN даних щодо домену на сервері IPA.\n"
 
 #: src/main.c:120
 #, c-format
@@ -975,7 +1045,7 @@ msgstr "\t-p ФАЙЛ    записати PID служби до файла\n"
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         примусово перевести NSS у режим FIPS\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "Сталася внутрішня помилка."
 
@@ -988,26 +1058,28 @@ msgstr "Відповідного запису не знайдено.\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "Служба сертифікації (CA) з псевдонімом «%s» вже існує."
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "Тип сховища сертифікатів не вказано."
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "Підтримки типу сховищ сертифікатів «%s» не передбачено."
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "Адресою «%s» має бути абсолютний шлях."
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "Адресу сховища сертифікатів не вказано."
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
@@ -1015,98 +1087,101 @@ msgid ""
 msgstr ""
 "Батьківська тека адреси «%s» недоступна через недостатні права доступу."
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "Батьківським каталогом адреси «%s» має бути коректний каталог."
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "Адресою «%s» має бути файл."
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr "Адреса «%s» недоступна через недостатні права доступу."
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "Адресою «%s» має бути каталог."
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "Псевдонім сертифіката не вказано."
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "Запит з псевдонімом «%s» вже існує."
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Сертифікат з цією адресою вже використовується за запитом з псевдонімом «%s»."
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "Підтримки типу сховищ ключів «%s» не передбачено."
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "Адресу сховища ключів не вказано."
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "Псевдонім ключа не вказано."
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 "Ключ з цією адресою вже використовується за запитом з псевдонімом «%s»."
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr "Підтримки ключів типу «%s» не передбачено."
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "Такої служби сертифікації (CA) не виявлено."
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "Невідома служба сертифікації «%s»."
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "Невідомий параметр або помилковий тип значення."
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr "Помилка під час спроби обробити аргументи."
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr "Нерозпізнана назва властивості."
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 "Недостатні права доступу. Будь ласка, повторіть дію від імені користувача "
 "root.\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "Будь ласка, перевірте, чи запущено фонову службу certmonger.\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr "Будь ласка, перевірте, чи працює ще фонова служба certmonger\n"
diff --git a/po/uk_UA.po b/po/uk_UA.po
index ee283a6..ebf75d5 100644
--- a/po/uk_UA.po
+++ b/po/uk_UA.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-03-24 16:29+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Ukrainian (Ukraine) (http://www.transifex.com/projects/p/"
@@ -19,12 +19,12 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -36,9 +36,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -135,7 +135,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -170,703 +170,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -912,7 +979,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -925,120 +992,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/ur.po b/po/ur.po
index 48a6223..9b84505 100644
--- a/po/ur.po
+++ b/po/ur.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Urdu (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Urdu (http://www.transifex.com/projects/p/certmonger/language/"
 "ur/)\n"
 "Language: ur\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/uz.po b/po/uz.po
index be105f5..3399b46 100644
--- a/po/uz.po
+++ b/po/uz.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Uzbek (http://www.transifex.com/projects/p/fedora/language/"
-"uz/)\n"
+"Language-Team: Uzbek (http://www.transifex.com/projects/p/certmonger/"
+"language/uz/)\n"
 "Language: uz\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/vi.po b/po/vi.po
index f886021..d85ceb4 100644
--- a/po/vi.po
+++ b/po/vi.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Vietnamese (http://www.transifex.com/projects/p/fedora/"
+"Language-Team: Vietnamese (http://www.transifex.com/projects/p/certmonger/"
 "language/vi/)\n"
 "Language: vi\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/wo.po b/po/wo.po
index d9d474f..35e146a 100644
--- a/po/wo.po
+++ b/po/wo.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Wolof (http://www.transifex.com/projects/p/fedora/language/"
-"wo/)\n"
+"Language-Team: Wolof (http://www.transifex.com/projects/p/certmonger/"
+"language/wo/)\n"
 "Language: wo\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/xh.po b/po/xh.po
index 6fdb326..b4cad2c 100644
--- a/po/xh.po
+++ b/po/xh.po
@@ -1,28 +1,29 @@
 # SOME DESCRIPTIVE TITLE.
 # Copyright (C) YEAR Red Hat, Inc.
 # This file is distributed under the same license as the PACKAGE package.
-# 
+#
 # Translators:
 msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:20-0400\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
 "PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Xhosa (http://www.transifex.com/projects/p/certmonger/language/xh/)\n"
+"Language-Team: Xhosa (http://www.transifex.com/projects/p/certmonger/"
+"language/xh/)\n"
+"Language: xh\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"Language: xh\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -34,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -133,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -168,700 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
-msgid "None of database directory and nickname or certificate file specified.\n"
+msgid ""
+"None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
-"The IPA backend requires the use of the -K option (principal name) when the "
-"-N option (subject name) is used.\n"
+"The IPA backend requires the use of the -K option (principal name) when the -"
+"N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
-msgid "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
+#: src/getcert.c:2998 src/getcert.c:3043
+msgid ""
+"  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
-"Error setting up ccache for \"host\" service on client using default keytab:"
-" %s.\n"
+"Error setting up ccache for \"host\" service on client using default keytab: "
+"%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
-msgid "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
+msgid ""
+"Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -907,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -920,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
-msgid "The location \"%s\" could not be accessed due to insufficient permissions."
+msgid ""
+"The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
-"Certificate at same location is already used by request with nickname "
-"\"%s\"."
+"Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/zh_CN.po b/po/zh_CN.po
index 4364c06..850799e 100644
--- a/po/zh_CN.po
+++ b/po/zh_CN.po
@@ -14,23 +14,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Chinese (China) (http://www.transifex.com/projects/p/fedora/"
-"language/zh_CN/)\n"
+"Language-Team: Chinese (China) (http://www.transifex.com/projects/p/"
+"certmonger/language/zh_CN/)\n"
 "Language: zh_CN\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "无法确定CA的主机名。\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "无法读取签名请求。\n"
@@ -42,9 +42,9 @@ msgstr "设置 xmlrpc 时出错。\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "分析服务器响应时出错。\n"
@@ -75,9 +75,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr "未指定预置文件/模板 (-T)，且无已知默认值。\n"
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "设置 xmlrpc 时出错。\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -141,7 +141,7 @@ msgstr "内存不足。\n"
 msgid "Error connecting to DBus.\n"
 msgstr "连接到 DBus 时出错。\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "请检验信息总线（D-Bus）服务是否正在运行。\n"
@@ -176,716 +176,784 @@ msgstr "从本地 %s 服务收到错误响应。\n"
 msgid "No response received from %s service.\n"
 msgstr "没有从 %s 服务收到响应。\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "初始化 Kerberos 库时出错：%s\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr "未识别的 keyUsage \"%s\"。\n"
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "无法估计 OID“%s”。\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr "解析 Kerberos 实体名“%s”时出错：%s。\n"
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr "反解析 Kerberos 主机名 “%s”时出错：%s。\n"
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s: 操作需要一个参数 -- '%c'\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s: 无效的选项 -- '%c'\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr "错误：未使用的额外参数 \"%s\"。\n"
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr "错误：输入了额外未使用的参数。\n"
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr "数据库位置或别名缺一不可。\n"
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr "数据库目录和证书文件都已指定。\n"
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr "没有指定数据库目录和别名，或证书文件。\n"
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr "密钥和证书不能保存到同一个文件。\n"
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr "当使用 -N 选项（主题名）时，IPA 后端要求使用 -K 选项（实体名）。\n"
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "没有找到具有名称“%s”的 CA.\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "设定请求参数时出错。\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "新的签名请求“%s”已添加。\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "新的签名请求无法添加。\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "新的跟踪请求“%s”已添加。\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "新的跟踪请求无法添加。\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr "没有指定 ID 、数据库目录和别名，或证书文件。\n"
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr "请求 “%s”已修改。\n"
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr "请求“%s”无法修改。\n"
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "未找到包含指定昵称的请求。\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr "没有找到匹配参数的请求。\n"
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr "请求“%s”已移除。\n"
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr "请求“%s”无法移除。\n"
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr "修改“%s”时出错。\n"
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr "正在重新提交“%s”到“%s”。\n"
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr "正在重新提交“%s”。\n"
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr "试图提交“%s”到“%s”时出错。\n"
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr "试图提交“%s”时出错。\n"
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr "正在跟踪的证书和请求数量：%d\n"
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "请求 ID '%s'：\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "    状态：%s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "    CA 错误：%s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr "    死机：%s\n"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr "    密钥对存储：type=%s"
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "无"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ",location='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ",nickname='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ",token='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ",pin='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ",pinfile='%s'"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "证书：type=%s,location='%s'"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "    CA：%s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr "    发行者：%s\n"
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr "    主题：%s\n"
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "    到期时间：%s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "未知"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "    电子邮件： "
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "    DNS： "
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "    实体名： "
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr "\t密钥用法: %s\n"
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "    EKU："
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr "\t保存前命令: %s\n"
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr "\t保存后命令: %s\n"
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "    跟踪：%s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "    自动更新：%s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA '%s'：\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "    CA 类型：%s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "    helper 位置：%s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "    下个序列号：%s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "    已知发行者名称：\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - 客户端证书登记工具\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "用法：%s request [options]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "所需参数：\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* 如果使用 NSS 数据库作为存储：\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d DIR    密钥和证书的NSS 数据库\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr "  -n NAME    基于 NSS 的存储的别名（只在同时使用 -d 时有效）\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr "-t NAME    基于 NSS 的存储的可选令牌名（只在同时使用 -d 时有效）\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* 如果使用文件作为存储：\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k FILE    私钥的PEM 文件\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f FILE    证书的 PEM 文件（只在同时使用 -k 时有效）\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* 如果密钥要被加密：\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p FILE    保存加密 PIN 的文件\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN    PIN 值\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "可选参数：\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* 证书处理设置：\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 "  -I NAME    要分配给请求的别名\n"
 "\n"
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr "  -g SIZE    要生成的密钥大小，如果密钥不存在\n"
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr "  -r     在临近到期时试图更新证书（默认）\n"
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr "  -R    不在临近到期时试图更新证书\n"
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr "  -c CA    使用指定的 CA 而不是默认 CA\n"
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr "  -T 预置文件\t要求 CA 使用指名的预置文件或模板处理请求\n"
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr "* 签名请求的参数：\n"
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr "  -N NAME     设定所需的主题名（默认：CN=<主机名>）\n"
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE    设定所需的扩展密钥使用 OID\n"
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr "  -u KEYUSAGE\t设定请求的密钥用法值\n"
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr "  -K NAME    设定所需实体名\n"
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr "   -D DNSNAME    设定所需的 DNS 名\n"
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr "    -E EMAIL    设定所需的电子邮件地址\n"
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* 总线选项：\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S    在系统总线上连接到的 certmonger 服务\n"
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s    在会话总线上连接到的 certmonger 服务\n"
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* 其他选项：\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr "  -B\t在保存证书前运行的命令\n"
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr "  -C\t在保存证书后运行的命令\n"
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v    报告所有错误细节\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "用法：%s start-tracking [options]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr "* 如果修改现存请求：\n"
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr "  -i NAME    现存跟踪请求的别名\n"
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* 如果密钥已加密：\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr "  -I NAME    要指定于跟踪请求的别名\n"
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr "* 签名请求在更新时的参数：\n"
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr "  -U EXTUSAGE    覆盖所需的扩展密钥使用 OID\n"
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr "  -K NAME    覆盖所需的实体名\n"
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr "  -D DNSNAME    覆盖所需的 DNS 名\n"
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr "  -E EMAIL    覆盖所需的电子邮件地址\n"
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "用法：%s stop-tracking [选项]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr "* 由请求标识符：\n"
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr "  -i NAME    跟踪请求的别名\n"
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "用法：%s resubmit [选项]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f FILE    证书的 PEM 文件\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr "* 签名请求的新参数值：\n"
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr "  -I NAME    要指定于跟踪请求的新别名\n"
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr "  -c CA    使用指定的 CA 而不是当前的\n"
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "用法：%s list [选项]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* 一般选项：\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA    只列出与此 CA 关联的请求和证书\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr "  -r    只列出未解决请求的相关信息\n"
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr "  -t    只列出被跟踪证书的相关信息\n"
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr "* 如果选择一个特定的需求：\n"
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 "  -d 目录<span class=\"whitespace other\" title=\"Tab\">»</span>仅列出使用该 "
 "NSS 数据库的请求和认证\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 "  -n 名称<span class=\"whitespace other\" title=\"Tab\">»</span>仅显示使用该"
 "名称的请求和认证\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 "  -f 文件<span class=\"whitespace other\" title=\"Tab\">»</span>仅列出保存在"
 "此 PEM 文件中的请求和认证\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr "  -S    在系统总线上连接 certmonger 服务\n"
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr "  -s    在会话总线上连接 certmonger 服务\n"
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "用法：%s list-cas [选项]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr "  -c CA    只列出具有此名称的 CA 的相关信息\n"
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "用法：%s request [options]\n"
+
+#: src/getcert.c:3178
+#, fuzzy
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr "  -c CA    只列出具有此名称的 CA 的相关信息\n"
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s：未识别命令\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 "选项 -t 不可跟选项 -K 共同使用。\n"
 "\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "选项 -k 不可跟选项 -K 共同使用。\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "选项 -K 不可跟选项 -k 或选项 -t 共同使用。\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr "无法确定签名请求的实体名。\n"
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "无法确定 CA 的 XMLRPC 服务器的位置。\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "无法确定 CA 的 XMLRPC 服务器的位置。\n"
+msgstr ""
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "无法确定 CA 的 XMLRPC 服务器的位置。\n"
+msgstr ""
 
 #: src/main.c:120
 #, c-format
@@ -930,7 +998,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr "\t-F         强制 NSS 进入 FIPS 模式\n"
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "发生一个内部错误。"
 
@@ -943,120 +1011,125 @@ msgstr "没有找到匹配的条目。\n"
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "具有别名“%s”的 CA 已经存在。"
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "证书存储类型没有指定。"
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "证书存储类型“%s”不支持。"
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "位置“%s”必须是绝对路径。"
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "证书存储位置没有指定。"
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "位置“%s”的上一层必须是有效目录。"
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "位置“%s”必须是文件。"
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "位置“%s”必须是目录。"
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "证书别名没有指定。"
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "具有别名“%s”的请求已经存在。"
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr "在相同位置的认证已经被包含昵称 \"%s\" 的请求使用。"
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "密钥存储类型“%s”不支持。"
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "密钥存储位置没有指定。"
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "密钥别名没有指定。"
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr "在相同位置的键已经被包含昵称 \"%s\" 的请求使用。"
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "没有该 CA。"
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "证书认证中心“%s”未知。"
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "未识别的参数或错误的值类型。"
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr "访问权限不足。请以根用户重试操作。\n"
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr "请检验 certmonger 服务是否已启动。\n"
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr "请检验 certmonger 服务是否仍在运行。\n"
diff --git a/po/zh_HK.po b/po/zh_HK.po
index 04d9fac..ac729e0 100644
--- a/po/zh_HK.po
+++ b/po/zh_HK.po
@@ -7,23 +7,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
 "Language-Team: Chinese (Hong Kong) (http://www.transifex.com/projects/p/"
-"fedora/language/zh_HK/)\n"
+"certmonger/language/zh_HK/)\n"
 "Language: zh_HK\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/zh_TW.po b/po/zh_TW.po
index 989cbe3..08fcc33 100644
--- a/po/zh_TW.po
+++ b/po/zh_TW.po
@@ -9,23 +9,23 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-04-08 20:37+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Chinese (Taiwan) (http://www.transifex.com/projects/p/fedora/"
-"language/zh_TW/)\n"
+"Language-Team: Chinese (Taiwan) (http://www.transifex.com/projects/p/"
+"certmonger/language/zh_TW/)\n"
 "Language: zh_TW\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr "無法判斷 CA 的主機名稱。\n"
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr "無法讀取簽署請求。\n"
@@ -37,9 +37,9 @@ msgstr "設置 XMLRPC 時發生錯誤。\n"
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr "解析伺服器回應時發生錯誤。\n"
@@ -70,9 +70,9 @@ msgid "No profile/template (-T) given, and no default known.\n"
 msgstr ""
 
 #: src/dogtag.c:378
-#, fuzzy, c-format
+#, c-format
 msgid "Error shutting down NSS.\n"
-msgstr "設置 XMLRPC 時發生錯誤。\n"
+msgstr ""
 
 #: src/dogtag.c:407 src/dogtag.c:584
 #, c-format
@@ -138,7 +138,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr "連接至 DBus 時發生錯誤。\n"
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr "請驗證訊息匯流排 (D-Bus) 服務是否正在執行。\n"
@@ -173,708 +173,775 @@ msgstr "從本地 %s 服務接收到錯誤回應。\n"
 msgid "No response received from %s service.\n"
 msgstr "沒有從 %s 服務接收到回應。\n"
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr "初始化 Kerberos 函式庫時發生錯誤：%s。\n"
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr "無法評估 OID 「%s」。\n"
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr "%s：選項必需引數 -- '%c'\n"
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr "%s：選項無效 -- '%c'\n"
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr "找不到名稱為「%s」的 CA。\n"
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr "設定請求參數時發生錯誤。\n"
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr "已加入新增的簽署請求「%s」。\n"
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr "無法加入新增的簽署請求。\n"
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr "已加入新增的追蹤請求「%s」。\n"
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr "無法加入新增的追蹤請求。\n"
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr "找不到指定暱稱的請求。\n"
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr "請求 ID「%s」：\n"
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr "\t狀態：%s\n"
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr "\tca-錯誤：%s\n"
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr "無"
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr "、位置='%s'"
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr "、暱稱='%s'"
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr "、token='%s'"
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr "、pin='%s'"
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr "、pin檔案='%s'"
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr "\t憑證：類型=%s、位置='%s'"
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr "\tCA：%s\n"
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr "\t失效日期：%s\n"
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr "未知"
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr "\t電郵："
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr "\tdns："
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr "\tprincipal 名稱："
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr "\teku："
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr "\ttrack：%s\n"
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr "\t自動更新：%s\n"
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr "CA「%s」：\n"
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr "\tca-類型：%s\n"
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr "\thelper-位置：%s\n"
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr "\t下個序號：%s\n"
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr "\tknown-issuer-names：\n"
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr "%s - 客戶端憑證註冊工具\n"
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr "用法：%s 請求 [選項]\n"
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr "請求的參數：\n"
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr "* 如以 NSS 資料庫作為儲存：\n"
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr "  -d 目錄\t金鑰及憑證的 NSS 資料庫\n"
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr "  -n 名稱\t基於 NSS 的儲存裝置的暱稱 (只有與 -d 一起用才有效)\n"
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 "  -t 名稱\t基於 NSS 的儲存裝置的 token 名稱 (可有可無；只有與 -d 一起用才有"
 "效)\n"
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr "* 如以檔案作為儲存：\n"
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr "  -k 檔案\t私鑰的 PEM 檔案\n"
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr "  -f 檔案\t憑證的 PEM 檔案 (只有與 -k 一起用才有效)\n"
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr "* 如金鑰要加密：\n"
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr "  -p 檔案\t儲存加密 PIN 的檔案\n"
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr "  -P PIN\tPIN 值\n"
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr "可有可無的引數：\n"
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr "* 憑證處理設定：\n"
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr "* 匯流排選項：\n"
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr "* 其他選項：\n"
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr "  -v\t報告錯誤的所有詳情\n"
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr "用法：%s start-tracking [選項]\n"
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr "* 如金鑰已加密：\n"
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr "用法：%s stop-tracking [選項]\n"
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr "用法：%s resubmit [選項]\n"
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr "  -f 檔案\t憑證的 PEM 檔案\n"
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr "用法：%s list [選項]\n"
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr "* 一般選項：\n"
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr "  -c CA\t只列出與此 CA 有關的請求與憑證\n"
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr "  -d 目錄\t只列出使用此 NSS 資料庫的請求及憑證\n"
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr "  -n 名稱\t只列出使用此暱稱的請求及憑證\n"
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr "  -f 檔案\t只列出儲存於此 PEM 檔案的請求及憑證\n"
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr "用法：%s list-cas [選項]\n"
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, fuzzy, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr "用法：%s 請求 [選項]\n"
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr "%s：指令無法辨識\n"
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr "選項 -t 不能與 -K 一起使用。\n"
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr "選項 -k 不能與 -K 一起使用。\n"
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr "選項 -K 不能與 -k 或 -t 一起使用。\n"
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr "無法判斷 CA 的 XMLRPC 伺服器的位置。\n"
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
-#, fuzzy, c-format
+#: src/ipa.c:413
+#, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
-msgstr "無法判斷 CA 的 XMLRPC 伺服器的位置。\n"
+msgstr ""
 
-#: src/ipa.c:465
-#, fuzzy, c-format
+#: src/ipa.c:475
+#, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
-msgstr "無法判斷 CA 的 XMLRPC 伺服器的位置。\n"
+msgstr ""
 
 #: src/main.c:120
 #, c-format
@@ -917,7 +984,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr "發生內部錯誤。"
 
@@ -930,120 +997,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr "已有暱稱為 \"%s\" 的 CA。"
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr "未指定憑證儲存類型。"
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr "不支援憑證儲存類型 \"%s\"。"
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr "\"%s\" 位置須為絕對路徑。"
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr "未指定憑證儲存位置。"
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr "\"%s\" 的上層須為有效目錄。"
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr "\"%s\" 位置須為檔案。"
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr "\"%s\" 位置須為目錄。"
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr "未指定憑證暱稱。"
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr "已有暱稱為 \"%s\" 的請求。"
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr "不支援金鑰儲存類型 \"%s\"。"
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr "未指定金鑰儲存位置。"
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr "未指定金鑰暱稱。"
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr "沒有這樣的 CA。"
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr "未知的憑證授權機構「%s」。"
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr "無法辨識的參數或錯誤的值類型。"
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""
diff --git a/po/zu.po b/po/zu.po
index dfbdf7b..043b419 100644
--- a/po/zu.po
+++ b/po/zu.po
@@ -7,10 +7,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: certmonger\n"
 "Report-Msgid-Bugs-To: certmonger-devel@lists.fedorahosted.org\n"
-"POT-Creation-Date: 2014-05-28 14:22-0400\n"
-"PO-Revision-Date: 2014-03-24 16:29+0000\n"
+"POT-Creation-Date: 2014-06-05 12:20-0400\n"
+"PO-Revision-Date: 2014-05-28 18:21+0000\n"
 "Last-Translator: Nalin Dahyabhai <nalin@fedoraproject.org>\n"
-"Language-Team: Zulu (http://www.transifex.com/projects/p/fedora/language/"
+"Language-Team: Zulu (http://www.transifex.com/projects/p/certmonger/language/"
 "zu/)\n"
 "Language: zu\n"
 "MIME-Version: 1.0\n"
@@ -18,12 +18,12 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: src/certmaster.c:127 src/ipa.c:237
+#: src/certmaster.c:127 src/ipa.c:239
 #, c-format
 msgid "Unable to determine hostname of CA.\n"
 msgstr ""
 
-#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:256
+#: src/certmaster.c:144 src/dogtag.c:434 src/ipa.c:258
 #, c-format
 msgid "Unable to read signing request.\n"
 msgstr ""
@@ -35,9 +35,9 @@ msgstr ""
 
 #: src/certmaster.c:196 src/getcert.c:372 src/getcert.c:391 src/getcert.c:410
 #: src/getcert.c:429 src/getcert.c:448 src/getcert.c:466 src/getcert.c:496
-#: src/getcert.c:1033 src/getcert.c:1338 src/getcert.c:1706 src/getcert.c:1787
-#: src/getcert.c:2131 src/getcert.c:2303 src/getcert.c:2386 src/getcert.c:2421
-#: src/getcert.c:2456 src/getcert.c:2475
+#: src/getcert.c:1063 src/getcert.c:1383 src/getcert.c:1782 src/getcert.c:1864
+#: src/getcert.c:2239 src/getcert.c:2411 src/getcert.c:2498 src/getcert.c:2533
+#: src/getcert.c:2568 src/getcert.c:2587
 #, c-format
 msgid "Error parsing server response.\n"
 msgstr ""
@@ -134,7 +134,7 @@ msgstr ""
 msgid "Error connecting to DBus.\n"
 msgstr ""
 
-#: src/getcert.c:274 src/tdbusm.c:1958
+#: src/getcert.c:274 src/tdbusm.c:1963
 #, c-format
 msgid "Please verify that the message bus (D-Bus) service is running.\n"
 msgstr ""
@@ -169,703 +169,770 @@ msgstr ""
 msgid "No response received from %s service.\n"
 msgstr ""
 
-#: src/getcert.c:588 src/getcert.c:1381 src/getcert.c:1840
+#: src/getcert.c:589 src/getcert.c:1428 src/getcert.c:1919
 #, c-format
 msgid "Error initializing Kerberos library: %s.\n"
 msgstr ""
 
-#: src/getcert.c:632
+#: src/getcert.c:633
 #, c-format
 msgid "No support for generating \"%s\" keys.\n"
 msgstr ""
 
-#: src/getcert.c:634
+#: src/getcert.c:635
 #, c-format
 msgid "Known key types include:"
 msgstr ""
 
-#: src/getcert.c:671 src/getcert.c:1451 src/getcert.c:1885
+#: src/getcert.c:672 src/getcert.c:1498 src/getcert.c:1964
 #, c-format
 msgid "Unrecognized keyUsage \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:681 src/getcert.c:1461 src/getcert.c:1895
+#: src/getcert.c:682 src/getcert.c:1508 src/getcert.c:1974
 #, c-format
 msgid "Could not evaluate OID \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:691 src/getcert.c:1471 src/getcert.c:1905
+#: src/getcert.c:692 src/getcert.c:1518 src/getcert.c:1984
 #, c-format
 msgid "Error parsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:699 src/getcert.c:1479 src/getcert.c:1913
+#: src/getcert.c:700 src/getcert.c:1526 src/getcert.c:1992
 #, c-format
 msgid "Error unparsing Kerberos principal name \"%s\": %s.\n"
 msgstr ""
 
-#: src/getcert.c:740 src/getcert.c:1520 src/getcert.c:1954 src/getcert.c:2233
-#: src/getcert.c:2581
+#: src/getcert.c:756 src/getcert.c:1582 src/getcert.c:2048 src/getcert.c:2341
+#: src/getcert.c:2747 src/getcert.c:2921
 #, c-format
 msgid "%s: option requires an argument -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:744 src/getcert.c:1523 src/getcert.c:1957 src/getcert.c:2236
-#: src/getcert.c:2584
+#: src/getcert.c:760 src/getcert.c:1585 src/getcert.c:2051 src/getcert.c:2344
+#: src/getcert.c:2750 src/getcert.c:2924
 #, c-format
 msgid "%s: invalid option -- '%c'\n"
 msgstr ""
 
-#: src/getcert.c:753
+#: src/getcert.c:769
 #, c-format
 msgid "Error: unused extra argument \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:756 src/getcert.c:1534 src/getcert.c:1965 src/getcert.c:2244
-#: src/getcert.c:2592
+#: src/getcert.c:772 src/getcert.c:1596 src/getcert.c:2059 src/getcert.c:2352
+#: src/getcert.c:2758 src/getcert.c:2932
 #, c-format
 msgid "Error: unused extra arguments were supplied.\n"
 msgstr ""
 
-#: src/getcert.c:762 src/getcert.c:1540 src/getcert.c:1733 src/getcert.c:1988
+#: src/getcert.c:778 src/getcert.c:1602 src/getcert.c:1809 src/getcert.c:2082
 #, c-format
 msgid "Database location or nickname specified without the other.\n"
 msgstr ""
 
-#: src/getcert.c:768 src/getcert.c:1546 src/getcert.c:1739 src/getcert.c:1994
+#: src/getcert.c:784 src/getcert.c:1608 src/getcert.c:1815 src/getcert.c:2088
 #, c-format
 msgid "Database directory and certificate file both specified.\n"
 msgstr ""
 
-#: src/getcert.c:776 src/getcert.c:1747 src/getcert.c:2002
+#: src/getcert.c:792 src/getcert.c:1823 src/getcert.c:2096
 #, c-format
 msgid ""
 "None of database directory and nickname or certificate file specified.\n"
 msgstr ""
 
-#: src/getcert.c:783 src/getcert.c:1562
+#: src/getcert.c:799 src/getcert.c:1624
 #, c-format
 msgid "Key and certificate can not both be saved to the same file.\n"
 msgstr ""
 
-#: src/getcert.c:809
+#: src/getcert.c:825
 #, c-format
 msgid ""
 "The IPA backend requires the use of the -K option (principal name) when the -"
 "N option (subject name) is used.\n"
 msgstr ""
 
-#: src/getcert.c:941 src/getcert.c:1318 src/getcert.c:1662 src/getcert.c:2022
-#: src/getcert.c:2251
+#: src/getcert.c:957 src/getcert.c:1349 src/getcert.c:1724 src/getcert.c:2116
+#: src/getcert.c:2359
 #, c-format
 msgid "No CA with name \"%s\" found.\n"
 msgstr ""
 
-#: src/getcert.c:1028 src/getcert.c:1333 src/getcert.c:1700 src/getcert.c:1782
-#: src/getcert.c:2125
+#: src/getcert.c:1058 src/getcert.c:1378 src/getcert.c:1776 src/getcert.c:1859
+#: src/getcert.c:2233
 #, c-format
 msgid "Error setting request arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1039
+#: src/getcert.c:1069
 #, c-format
 msgid "New signing request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1042
+#: src/getcert.c:1072
 #, c-format
 msgid "New signing request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1344
+#: src/getcert.c:1389
 #, c-format
 msgid "New tracking request \"%s\" added.\n"
 msgstr ""
 
-#: src/getcert.c:1348
+#: src/getcert.c:1393
 #, c-format
 msgid "New tracking request could not be added.\n"
 msgstr ""
 
-#: src/getcert.c:1555
+#: src/getcert.c:1617
 #, c-format
 msgid ""
 "None of ID or database directory and nickname or certificate file "
 "specified.\n"
 msgstr ""
 
-#: src/getcert.c:1714
+#: src/getcert.c:1790
 #, c-format
 msgid "Request \"%s\" modified.\n"
 msgstr ""
 
-#: src/getcert.c:1718
+#: src/getcert.c:1794
 #, c-format
 msgid "Request \"%s\" could not be modified.\n"
 msgstr ""
 
-#: src/getcert.c:1726 src/getcert.c:1981 src/getcert.c:2258
+#: src/getcert.c:1802 src/getcert.c:2075 src/getcert.c:2366
 #, c-format
 msgid "No request found with specified nickname.\n"
 msgstr ""
 
-#: src/getcert.c:1773 src/getcert.c:2008 src/getcert.c:2269
+#: src/getcert.c:1850 src/getcert.c:2102 src/getcert.c:2377
 #, c-format
 msgid "No request found that matched arguments.\n"
 msgstr ""
 
-#: src/getcert.c:1792
+#: src/getcert.c:1869
 #, c-format
 msgid "Request \"%s\" removed.\n"
 msgstr ""
 
-#: src/getcert.c:1796
+#: src/getcert.c:1873
 #, c-format
 msgid "Request \"%s\" could not be removed.\n"
 msgstr ""
 
-#: src/getcert.c:2139
+#: src/getcert.c:2247
 #, c-format
 msgid "Error modifying \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2155
+#: src/getcert.c:2263
 #, c-format
 msgid "Resubmitting \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2158
+#: src/getcert.c:2266
 #, c-format
 msgid "Resubmitting \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2164
+#: src/getcert.c:2272
 #, c-format
 msgid "Error attempting to submit \"%s\" to \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2167
+#: src/getcert.c:2275
 #, c-format
 msgid "Error attempting to submit \"%s\".\n"
 msgstr ""
 
-#: src/getcert.c:2280
+#: src/getcert.c:2388
 #, c-format
 msgid "Number of certificates and requests being tracked: %d.\n"
 msgstr ""
 
-#: src/getcert.c:2408
+#: src/getcert.c:2520
 #, c-format
 msgid "Request ID '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2409
+#: src/getcert.c:2521
 #, c-format
 msgid "\tstatus: %s\n"
 msgstr ""
 
-#: src/getcert.c:2413
+#: src/getcert.c:2525
 #, c-format
 msgid "\tca-error: %s\n"
 msgstr ""
 
-#: src/getcert.c:2415
+#: src/getcert.c:2527
 #, c-format
 msgid "\tstuck: %s\n"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 #, c-format
 msgid "\tkey pair storage: type=%s"
 msgstr ""
 
-#: src/getcert.c:2435
+#: src/getcert.c:2547
 msgid "NONE"
 msgstr ""
 
-#: src/getcert.c:2437
+#: src/getcert.c:2549
 #, c-format
 msgid ",location='%s'"
 msgstr ""
 
-#: src/getcert.c:2440 src/getcert.c:2462
+#: src/getcert.c:2552 src/getcert.c:2574
 #, c-format
 msgid ",nickname='%s'"
 msgstr ""
 
-#: src/getcert.c:2443 src/getcert.c:2465
+#: src/getcert.c:2555 src/getcert.c:2577
 #, c-format
 msgid ",token='%s'"
 msgstr ""
 
-#: src/getcert.c:2446
+#: src/getcert.c:2558
 #, c-format
 msgid ",pin='%s'"
 msgstr ""
 
-#: src/getcert.c:2449
+#: src/getcert.c:2561
 #, c-format
 msgid ",pinfile='%s'"
 msgstr ""
 
-#: src/getcert.c:2460
+#: src/getcert.c:2572
 #, c-format
 msgid "\tcertificate: type=%s,location='%s'"
 msgstr ""
 
-#: src/getcert.c:2480
+#: src/getcert.c:2592
 #, c-format
 msgid "\tCA: %s\n"
 msgstr ""
 
-#: src/getcert.c:2482
+#: src/getcert.c:2594
 #, c-format
 msgid "\tissuer: %s\n"
 msgstr ""
 
-#: src/getcert.c:2483
+#: src/getcert.c:2595
 #, c-format
 msgid "\tsubject: %s\n"
 msgstr ""
 
-#: src/getcert.c:2484
+#: src/getcert.c:2596
 #, c-format
 msgid "\texpires: %s\n"
 msgstr ""
 
-#: src/getcert.c:2487
+#: src/getcert.c:2599
 msgid "unknown"
 msgstr ""
 
-#: src/getcert.c:2490
+#: src/getcert.c:2602
 msgid "\temail: "
 msgstr ""
 
-#: src/getcert.c:2496
+#: src/getcert.c:2608
 msgid "\tdns: "
 msgstr ""
 
-#: src/getcert.c:2502
+#: src/getcert.c:2614
 msgid "\tprincipal name: "
 msgstr ""
 
-#: src/getcert.c:2510
+#: src/getcert.c:2622
 msgid "\tIP address: "
 msgstr ""
 
-#: src/getcert.c:2529
+#: src/getcert.c:2641
 #, c-format
 msgid "\tkey usage: %s\n"
 msgstr ""
 
-#: src/getcert.c:2533
+#: src/getcert.c:2645
 msgid "\teku: "
 msgstr ""
 
-#: src/getcert.c:2537
+#: src/getcert.c:2653 src/getcert.c:2822
+#, c-format
+msgid "\troot certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2662 src/getcert.c:2831
+#, c-format
+msgid "\tother root certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2671 src/getcert.c:2840
+#, c-format
+msgid "\tother certificates saved to files:\n"
+msgstr ""
+
+#: src/getcert.c:2680 src/getcert.c:2849
+#, c-format
+msgid "\troot certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2689 src/getcert.c:2858
+#, c-format
+msgid "\tother root certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2698 src/getcert.c:2867
+#, c-format
+msgid "\tother certificates saved to databases:\n"
+msgstr ""
+
+#: src/getcert.c:2703 src/getcert.c:2883
 #, c-format
 msgid "\tpre-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2540
+#: src/getcert.c:2706 src/getcert.c:2889
 #, c-format
 msgid "\tpost-save command: %s\n"
 msgstr ""
 
-#: src/getcert.c:2543
+#: src/getcert.c:2709
 #, c-format
 msgid "\ttrack: %s\n"
 msgstr ""
 
-#: src/getcert.c:2547
+#: src/getcert.c:2713
 #, c-format
 msgid "\tauto-renew: %s\n"
 msgstr ""
 
-#: src/getcert.c:2606
+#: src/getcert.c:2772
 #, c-format
 msgid "CA '%s':\n"
 msgstr ""
 
-#: src/getcert.c:2613
+#: src/getcert.c:2778
+#, c-format
+msgid "\tself-identifies as: %s\n"
+msgstr ""
+
+#: src/getcert.c:2787
 #, c-format
 msgid "\tca-type: %s\n"
 msgstr ""
 
-#: src/getcert.c:2615
+#: src/getcert.c:2789
 #, c-format
 msgid "\thelper-location: %s\n"
 msgstr ""
 
-#: src/getcert.c:2620
+#: src/getcert.c:2794
 #, c-format
 msgid "\tnext-serial-number: %s\n"
 msgstr ""
 
-#: src/getcert.c:2630
+#: src/getcert.c:2804
 #, c-format
 msgid "\tknown-issuer-names:\n"
 msgstr ""
 
-#: src/getcert.c:2656
+#: src/getcert.c:2813
+#, c-format
+msgid "\tknown profiles/templates/certtypes:\n"
+msgstr ""
+
+#: src/getcert.c:2876
+#, c-format
+msgid "\tdefault profile/template/certtype: %s\n"
+msgstr ""
+
+#: src/getcert.c:2951
+#, c-format
+msgid "\terror refreshing CA data\n"
+msgstr ""
+
+#: src/getcert.c:2975
 #, c-format
 msgid "%s - client certificate enrollment tool\n"
 msgstr ""
 
-#: src/getcert.c:2660
+#: src/getcert.c:2979
 #, c-format
 msgid "Usage: %s request [options]\n"
 msgstr ""
 
-#: src/getcert.c:2662 src/getcert.c:2705 src/getcert.c:2747 src/getcert.c:2769
+#: src/getcert.c:2981 src/getcert.c:3026 src/getcert.c:3070 src/getcert.c:3092
 msgid "Required arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2663 src/getcert.c:2708 src/getcert.c:2750 src/getcert.c:2772
-#: src/getcert.c:2820
+#: src/getcert.c:2982 src/getcert.c:3029 src/getcert.c:3073 src/getcert.c:3095
+#: src/getcert.c:3145
 msgid "* If using an NSS database for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2664 src/getcert.c:2709 src/getcert.c:2751 src/getcert.c:2773
+#: src/getcert.c:2983 src/getcert.c:3030 src/getcert.c:3074 src/getcert.c:3096
 msgid "  -d DIR\tNSS database for key and cert\n"
 msgstr ""
 
-#: src/getcert.c:2665 src/getcert.c:2710 src/getcert.c:2752 src/getcert.c:2774
+#: src/getcert.c:2984 src/getcert.c:3031 src/getcert.c:3075 src/getcert.c:3097
 msgid "  -n NAME\tnickname for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2666 src/getcert.c:2711 src/getcert.c:2753 src/getcert.c:2775
+#: src/getcert.c:2985 src/getcert.c:3032 src/getcert.c:3076 src/getcert.c:3098
 msgid ""
 "  -t NAME\toptional token name for NSS-based storage (only valid with -d)\n"
 msgstr ""
 
-#: src/getcert.c:2667 src/getcert.c:2712 src/getcert.c:2754 src/getcert.c:2776
-#: src/getcert.c:2823
+#: src/getcert.c:2986 src/getcert.c:3033 src/getcert.c:3077 src/getcert.c:3099
+#: src/getcert.c:3148
 msgid "* If using files for storage:\n"
 msgstr ""
 
-#: src/getcert.c:2668 src/getcert.c:2713 src/getcert.c:2755
+#: src/getcert.c:2987 src/getcert.c:3034 src/getcert.c:3078
 msgid "  -k FILE\tPEM file for private key\n"
 msgstr ""
 
-#: src/getcert.c:2669 src/getcert.c:2714 src/getcert.c:2756
+#: src/getcert.c:2988 src/getcert.c:3035 src/getcert.c:3079
 msgid "  -f FILE\tPEM file for certificate (only valid with -k)\n"
 msgstr ""
 
-#: src/getcert.c:2670
+#: src/getcert.c:2989
 msgid "* If keys are to be encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2671 src/getcert.c:2716 src/getcert.c:2780
+#: src/getcert.c:2990 src/getcert.c:3037 src/getcert.c:3103
 msgid "  -p FILE\tfile which holds the encryption PIN\n"
 msgstr ""
 
-#: src/getcert.c:2672 src/getcert.c:2717 src/getcert.c:2781
+#: src/getcert.c:2991 src/getcert.c:3038 src/getcert.c:3104
 msgid "  -P PIN\tPIN value\n"
 msgstr ""
 
-#: src/getcert.c:2674 src/getcert.c:2719 src/getcert.c:2758 src/getcert.c:2792
-#: src/getcert.c:2811 src/getcert.c:2835
+#: src/getcert.c:2993 src/getcert.c:3040 src/getcert.c:3081 src/getcert.c:3115
+#: src/getcert.c:3136 src/getcert.c:3160 src/getcert.c:3175
 msgid "Optional arguments:\n"
 msgstr ""
 
-#: src/getcert.c:2675 src/getcert.c:2720 src/getcert.c:2793
+#: src/getcert.c:2994 src/getcert.c:3041 src/getcert.c:3116
 msgid "* Certificate handling settings:\n"
 msgstr ""
 
-#: src/getcert.c:2676
+#: src/getcert.c:2995
 msgid "  -I NAME\tnickname to assign to the request\n"
 msgstr ""
 
-#: src/getcert.c:2677
+#: src/getcert.c:2996
 msgid "  -G TYPE\ttype of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2678
+#: src/getcert.c:2997
 msgid "  -g SIZE\tsize of key to be generated if one is not already in place\n"
 msgstr ""
 
-#: src/getcert.c:2679 src/getcert.c:2722
+#: src/getcert.c:2998 src/getcert.c:3043
 msgid ""
 "  -r\t\tattempt to renew the certificate when expiration nears (default)\n"
 msgstr ""
 
-#: src/getcert.c:2680 src/getcert.c:2723
+#: src/getcert.c:2999 src/getcert.c:3044
 msgid "  -R\t\tdon't attempt to renew the certificate when expiration nears\n"
 msgstr ""
 
-#: src/getcert.c:2682 src/getcert.c:2725
+#: src/getcert.c:3001 src/getcert.c:3046
 msgid "  -c CA\t\tuse the specified CA rather than the default\n"
 msgstr ""
 
-#: src/getcert.c:2684 src/getcert.c:2727 src/getcert.c:2798
+#: src/getcert.c:3003 src/getcert.c:3048 src/getcert.c:3121
 msgid ""
 "  -T PROFILE\task the CA to process the request using the named profile or "
 "template\n"
 msgstr ""
 
-#: src/getcert.c:2685
+#: src/getcert.c:3004
 msgid "* Parameters for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2686 src/getcert.c:2784
+#: src/getcert.c:3005 src/getcert.c:3107
 msgid "  -N NAME\tset requested subject name (default: CN=<hostname>)\n"
 msgstr ""
 
-#: src/getcert.c:2687 src/getcert.c:2785
+#: src/getcert.c:3006 src/getcert.c:3108
 msgid "  -U EXTUSAGE\tset requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2688 src/getcert.c:2730 src/getcert.c:2786
+#: src/getcert.c:3007 src/getcert.c:3051 src/getcert.c:3109
 msgid "  -u KEYUSAGE\tset requested key usage value\n"
 msgstr ""
 
-#: src/getcert.c:2689 src/getcert.c:2787
+#: src/getcert.c:3008 src/getcert.c:3110
 msgid "  -K NAME\tset requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2690 src/getcert.c:2788
+#: src/getcert.c:3009 src/getcert.c:3111
 msgid "  -D DNSNAME\tset requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2691 src/getcert.c:2789
+#: src/getcert.c:3010 src/getcert.c:3112
 msgid "  -E EMAIL\tset requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2692 src/getcert.c:2790
+#: src/getcert.c:3011 src/getcert.c:3113
 msgid "  -A ADDRESS\tset requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2693 src/getcert.c:2735 src/getcert.c:2759 src/getcert.c:2799
-#: src/getcert.c:2825 src/getcert.c:2840
+#: src/getcert.c:3012 src/getcert.c:3056 src/getcert.c:3082 src/getcert.c:3122
+#: src/getcert.c:3150 src/getcert.c:3165 src/getcert.c:3180
 msgid "* Bus options:\n"
 msgstr ""
 
-#: src/getcert.c:2694 src/getcert.c:2736 src/getcert.c:2760 src/getcert.c:2800
+#: src/getcert.c:3013 src/getcert.c:3057 src/getcert.c:3083 src/getcert.c:3123
 msgid "  -S\t\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2695 src/getcert.c:2737 src/getcert.c:2761 src/getcert.c:2801
+#: src/getcert.c:3014 src/getcert.c:3058 src/getcert.c:3084 src/getcert.c:3124
 msgid "  -s\t\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2696 src/getcert.c:2738 src/getcert.c:2762 src/getcert.c:2802
-#: src/getcert.c:2828 src/getcert.c:2843
+#: src/getcert.c:3015 src/getcert.c:3059 src/getcert.c:3085 src/getcert.c:3125
+#: src/getcert.c:3153 src/getcert.c:3168 src/getcert.c:3183
 msgid "* Other options:\n"
 msgstr ""
 
-#: src/getcert.c:2697 src/getcert.c:2739 src/getcert.c:2803
+#: src/getcert.c:3016 src/getcert.c:3060 src/getcert.c:3126
 msgid "  -B\tcommand to run before saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2698 src/getcert.c:2740 src/getcert.c:2804
+#: src/getcert.c:3017 src/getcert.c:3061 src/getcert.c:3127
 msgid "  -C\tcommand to run after saving the certificate\n"
 msgstr ""
 
-#: src/getcert.c:2699 src/getcert.c:2741 src/getcert.c:2763 src/getcert.c:2805
-#: src/getcert.c:2829 src/getcert.c:2844
+#: src/getcert.c:3018 src/getcert.c:3062 src/getcert.c:3128
+msgid "  -F\tfile in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3019 src/getcert.c:3063 src/getcert.c:3129
+msgid "  -a\tNSS database in which to store the CA's certificates\n"
+msgstr ""
+
+#: src/getcert.c:3020 src/getcert.c:3064 src/getcert.c:3086 src/getcert.c:3130
+#: src/getcert.c:3154 src/getcert.c:3169 src/getcert.c:3184
 msgid "  -v\treport all details of errors\n"
 msgstr ""
 
-#: src/getcert.c:2703
+#: src/getcert.c:3024
 #, c-format
 msgid "Usage: %s start-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2706
+#: src/getcert.c:3027
 msgid "* If modifying an existing request:\n"
 msgstr ""
 
-#: src/getcert.c:2707
+#: src/getcert.c:3028
 msgid "  -i NAME\tnickname of an existing tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2715 src/getcert.c:2779
+#: src/getcert.c:3036 src/getcert.c:3102
 msgid "* If keys are encrypted:\n"
 msgstr ""
 
-#: src/getcert.c:2721
+#: src/getcert.c:3042
 msgid "  -I NAME\tnickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2728
+#: src/getcert.c:3049
 msgid "* Parameters for the signing request at renewal time:\n"
 msgstr ""
 
-#: src/getcert.c:2729
+#: src/getcert.c:3050
 msgid "  -U EXTUSAGE\toverride requested extended key usage OID\n"
 msgstr ""
 
-#: src/getcert.c:2731
+#: src/getcert.c:3052
 msgid "  -K NAME\toverride requested principal name\n"
 msgstr ""
 
-#: src/getcert.c:2732
+#: src/getcert.c:3053
 msgid "  -D DNSNAME\toverride requested DNS name\n"
 msgstr ""
 
-#: src/getcert.c:2733
+#: src/getcert.c:3054
 msgid "  -E EMAIL\toverride requested email address\n"
 msgstr ""
 
-#: src/getcert.c:2734
+#: src/getcert.c:3055
 msgid "  -A ADDRESS\toverride requested IP address\n"
 msgstr ""
 
-#: src/getcert.c:2745
+#: src/getcert.c:3068
 #, c-format
 msgid "Usage: %s stop-tracking [options]\n"
 msgstr ""
 
-#: src/getcert.c:2748 src/getcert.c:2770
+#: src/getcert.c:3071 src/getcert.c:3093
 msgid "* By request identifier:\n"
 msgstr ""
 
-#: src/getcert.c:2749 src/getcert.c:2771 src/getcert.c:2819
+#: src/getcert.c:3072 src/getcert.c:3094 src/getcert.c:3144
 msgid "  -i NAME\tnickname for tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2767
+#: src/getcert.c:3090
 #, c-format
 msgid "Usage: %s resubmit [options]\n"
 msgstr ""
 
-#: src/getcert.c:2777
+#: src/getcert.c:3100
 msgid "  -f FILE\tPEM file for certificate\n"
 msgstr ""
 
-#: src/getcert.c:2783
+#: src/getcert.c:3106
 msgid "* New parameter values for the signing request:\n"
 msgstr ""
 
-#: src/getcert.c:2794
+#: src/getcert.c:3117
 msgid "  -I NAME\tnew nickname to give to tracking request\n"
 msgstr ""
 
-#: src/getcert.c:2796
+#: src/getcert.c:3119
 msgid "  -c CA\t\tuse the specified CA rather than the current one\n"
 msgstr ""
 
-#: src/getcert.c:2809
+#: src/getcert.c:3134
 #, c-format
 msgid "Usage: %s list [options]\n"
 msgstr ""
 
-#: src/getcert.c:2812 src/getcert.c:2837
+#: src/getcert.c:3137 src/getcert.c:3162 src/getcert.c:3177
 msgid "* General options:\n"
 msgstr ""
 
-#: src/getcert.c:2814
+#: src/getcert.c:3139
 msgid "  -c CA\tlist only requests and certs associated with this CA\n"
 msgstr ""
 
-#: src/getcert.c:2816
+#: src/getcert.c:3141
 msgid "  -r\tlist only information about outstanding requests\n"
 msgstr ""
 
-#: src/getcert.c:2817
+#: src/getcert.c:3142
 msgid "  -t\tlist only information about tracked certificates\n"
 msgstr ""
 
-#: src/getcert.c:2818
+#: src/getcert.c:3143
 msgid "* If selecting a specific request:\n"
 msgstr ""
 
-#: src/getcert.c:2821
+#: src/getcert.c:3146
 msgid "  -d DIR\tonly list requests and certs which use this NSS database\n"
 msgstr ""
 
-#: src/getcert.c:2822
+#: src/getcert.c:3147
 msgid "  -n NAME\tonly list requests and certs which use this nickname\n"
 msgstr ""
 
-#: src/getcert.c:2824
+#: src/getcert.c:3149
 msgid "  -f FILE\tonly list requests and certs stored in this PEM file\n"
 msgstr ""
 
-#: src/getcert.c:2826 src/getcert.c:2841
+#: src/getcert.c:3151 src/getcert.c:3166 src/getcert.c:3181
 msgid "  -S\tconnect to the certmonger service on the system bus\n"
 msgstr ""
 
-#: src/getcert.c:2827 src/getcert.c:2842
+#: src/getcert.c:3152 src/getcert.c:3167 src/getcert.c:3182
 msgid "  -s\tconnect to the certmonger service on the session bus\n"
 msgstr ""
 
-#: src/getcert.c:2833
+#: src/getcert.c:3158
 #, c-format
 msgid "Usage: %s list-cas [options]\n"
 msgstr ""
 
-#: src/getcert.c:2838
+#: src/getcert.c:3163
 msgid "  -c CA\tlist only information about the CA with this name\n"
 msgstr ""
 
-#: src/getcert.c:2895
+#: src/getcert.c:3173
+#, c-format
+msgid "Usage: %s refresh-ca [options]\n"
+msgstr ""
+
+#: src/getcert.c:3178
+msgid "  -c CA\trefresh information about the CA with this name\n"
+msgstr ""
+
+#: src/getcert.c:3236
 #, c-format
 msgid "%s: unrecognized command\n"
 msgstr ""
 
-#: src/ipa.c:144
+#: src/ipa.c:145
 #, c-format
 msgid "The -t option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:152
+#: src/ipa.c:153
 #, c-format
 msgid "The -k option can not be used with the -K option.\n"
 msgstr ""
 
-#: src/ipa.c:160
+#: src/ipa.c:161
 #, c-format
 msgid "The -K option can not be used with either the -k or the -t option.\n"
 msgstr ""
 
-#: src/ipa.c:223
+#: src/ipa.c:225
 #, c-format
 msgid "Unable to determine principal name for signing request.\n"
 msgstr ""
 
-#: src/ipa.c:240
+#: src/ipa.c:242
 #, c-format
 msgid "Unable to determine location of CA's XMLRPC server.\n"
 msgstr ""
 
-#: src/ipa.c:291
+#: src/ipa.c:293
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using default keytab: "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:295
+#: src/ipa.c:297
 #, c-format
 msgid ""
 "Error setting up ccache for \"%s\" on client using default keytab: %s.\n"
 msgstr ""
 
-#: src/ipa.c:302
+#: src/ipa.c:304
 #, c-format
 msgid ""
 "Error setting up ccache for \"host\" service on client using keytab \"%s\": "
 "%s.\n"
 msgstr ""
 
-#: src/ipa.c:306
+#: src/ipa.c:308
 #, c-format
 msgid "Error setting up ccache for \"%s\" on client using keytab \"%s\": %s.\n"
 msgstr ""
 
-#: src/ipa.c:325
+#: src/ipa.c:335
 #, c-format
 msgid "Error setting up for XMLRPC on the client.\n"
 msgstr ""
 
-#: src/ipa.c:403
+#: src/ipa.c:413
 #, c-format
 msgid "Unable to determine location of IPA LDAP server.\n"
 msgstr ""
 
-#: src/ipa.c:465
+#: src/ipa.c:475
 #, c-format
 msgid "Unable to determine base DN of domain information on IPA server.\n"
 msgstr ""
@@ -911,7 +978,7 @@ msgstr ""
 msgid "\t-F         force NSS into FIPS mode\n"
 msgstr ""
 
-#: src/tdbush.c:119 src/tdbush.c:1547 src/tdbush.c:1819
+#: src/tdbush.c:119 src/tdbush.c:1859 src/tdbush.c:2161
 msgid "An internal error has occurred."
 msgstr ""
 
@@ -924,120 +991,125 @@ msgstr ""
 msgid "There is already a CA with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:433
+#: src/tdbush.c:436
 msgid "Certificate storage type not specified."
 msgstr ""
 
-#: src/tdbush.c:446
+#: src/tdbush.c:449
 #, c-format
 msgid "Certificate storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:483 src/tdbush.c:516 src/tdbush.c:575 src/tdbush.c:760
-#: src/tdbush.c:819 src/tdbush.c:2632
+#: src/tdbush.c:486 src/tdbush.c:519 src/tdbush.c:578 src/tdbush.c:763
+#: src/tdbush.c:822 src/tdbush.c:925 src/tdbush.c:970 src/tdbush.c:1025
+#: src/tdbush.c:1070 src/tdbush.c:1125 src/tdbush.c:1170 src/tdbush.c:2974
 #, c-format
 msgid "The location \"%s\" must be an absolute path."
 msgstr ""
 
-#: src/tdbush.c:510 src/tdbush.c:569 src/tdbush.c:638
+#: src/tdbush.c:513 src/tdbush.c:572 src/tdbush.c:641
 msgid "Certificate storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:528 src/tdbush.c:772
+#: src/tdbush.c:531 src/tdbush.c:775 src/tdbush.c:982 src/tdbush.c:1082
+#: src/tdbush.c:1182
 #, c-format
 msgid ""
 "The parent of location \"%s\" could not be accessed due to insufficient "
 "permissions."
 msgstr ""
 
-#: src/tdbush.c:536 src/tdbush.c:780
+#: src/tdbush.c:539 src/tdbush.c:783 src/tdbush.c:990 src/tdbush.c:1090
+#: src/tdbush.c:1190
 #, c-format
 msgid "The parent of location \"%s\" must be a valid directory."
 msgstr ""
 
-#: src/tdbush.c:547 src/tdbush.c:791
+#: src/tdbush.c:550 src/tdbush.c:794 src/tdbush.c:1001 src/tdbush.c:1101
+#: src/tdbush.c:1201
 #, c-format
 msgid "The location \"%s\" must be a file."
 msgstr ""
 
-#: src/tdbush.c:587
+#: src/tdbush.c:590 src/tdbush.c:937 src/tdbush.c:1037 src/tdbush.c:1137
 #, c-format
 msgid ""
 "The location \"%s\" could not be accessed due to insufficient permissions."
 msgstr ""
 
-#: src/tdbush.c:595 src/tdbush.c:828
+#: src/tdbush.c:598 src/tdbush.c:831 src/tdbush.c:945 src/tdbush.c:1045
+#: src/tdbush.c:1145
 #, c-format
 msgid "The location \"%s\" must be a directory."
 msgstr ""
 
-#: src/tdbush.c:616
+#: src/tdbush.c:619
 msgid "Certificate nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:659 src/tdbush.c:2523
+#: src/tdbush.c:662 src/tdbush.c:2865
 #, c-format
 msgid "There is already a request with the nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:695
+#: src/tdbush.c:698
 #, c-format
 msgid ""
 "Certificate at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:728
+#: src/tdbush.c:731
 #, c-format
 msgid "Key storage type \"%s\" not supported."
 msgstr ""
 
-#: src/tdbush.c:754 src/tdbush.c:813
+#: src/tdbush.c:757 src/tdbush.c:816
 msgid "Key storage location not specified."
 msgstr ""
 
-#: src/tdbush.c:847
+#: src/tdbush.c:850
 msgid "Key nickname not specified."
 msgstr ""
 
-#: src/tdbush.c:903
+#: src/tdbush.c:906
 #, c-format
 msgid "Key at same location is already used by request with nickname \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:974
+#: src/tdbush.c:1277
 #, c-format
 msgid "No support for key type \"%s\"."
 msgstr ""
 
-#: src/tdbush.c:1047
+#: src/tdbush.c:1358
 msgid "No such CA."
 msgstr ""
 
-#: src/tdbush.c:2541
+#: src/tdbush.c:2883
 #, c-format
 msgid "Certificate authority \"%s\" not known."
 msgstr ""
 
-#: src/tdbush.c:2823
+#: src/tdbush.c:3219
 msgid "Unrecognized parameter or wrong value type."
 msgstr ""
 
-#: src/tdbush.c:4111
+#: src/tdbush.c:4511
 msgid "Error parsing arguments."
 msgstr ""
 
-#: src/tdbush.c:4165
+#: src/tdbush.c:4565
 msgid "Unrecognized property name."
 msgstr ""
 
-#: src/tdbusm.c:1948
+#: src/tdbusm.c:1953
 msgid "Insufficient access.  Please retry operation as root.\n"
 msgstr ""
 
-#: src/tdbusm.c:1952
+#: src/tdbusm.c:1957
 msgid "Please verify that the certmonger service has been started.\n"
 msgstr ""
 
-#: src/tdbusm.c:1955
+#: src/tdbusm.c:1960
 msgid "Please verify that the certmonger service is still running.\n"
 msgstr ""