SearchToken - Used to select the keys and certificates to be recovered. Can be any of the following: Certificate Common Name ...

SearchToken -- Used to select the keys and certificates to be recovered.
        Can be any of the following:
        Certificate Common Name
        Certificate Serial Number
        Certificate SHA-1 hash
        Requester Name (domain\user)
        UPN (user@domain)
RecoveryBlobOutFile -- output file containing a certificate chain and an
        associated private key, still encrypted to one or more Key Recovery
        Agent certificates.