can contain the following options: /Cert /Store /Type /FriendlyName /Subject /Issuer /Serial - the name of the certificate ...

   can contain the following options:
  /Cert [/Store ] [/Type ] [/FriendlyName ]
  [/Subject ] [/Issuer ] [/Serial ]
       -- the name of the certificate store.  By default, it is
                     "MS-DNSSEC".
        --  can be one of the following values:
                     "machine": use machine certificate store
                     "user": use user certificate store
                     By default, a "machine" certificate store will be used.
    -- friendly name of the certificate
         -- subject of the certificate, for example,
                     "CN = example.com 43576 RSASHA1 257". It is case
                     sensitive.
          -- issuer of the certificate.
    -- serial number of the certificate as a string of 
                     2-digit hex, for example,
                     "79 7f 1e 1b 41 20 cf 8d 4a 9a 55 b7 83 c8 33 e9"
  One or more of the above options can be given. The options must
  identify one unique certificate in the certificate store.