CertificateDir - directory of certificate, store and PFX files. OcspDir - directory to write OCSP responses. ThreadCount ...

CertificateDir -- directory of certificate, store and PFX files.
OcspDir        -- directory to write OCSP responses.
ThreadCount    -- optional maximum number of threads for concurrent downloading. Default is 10.
Modifiers -- Comma separated list of one or more of the following:
        %1 -- Download once and exit
        %2 -- Read from OcspDir instead of writing
By default, certutil won't exit and must be explicitly terminated.