InFileList - comma separated list of Certificate or CRL files to modify and re-sign SerialNumber - Serial number of certificate ...

InFileList -- comma separated list of Certificate or CRL files to modify
         and re-sign
SerialNumber -- Serial number of certificate to create
         Validity period and other options must not be present
%1 -- Create an empty CRL
         Validity period and other options must not be present
OutFileList -- comma separated list of modified Certificate or CRL output
         files.  The number of files must match InFileList.
StartDate+%9 -- new validity period: optional date plus
         optional days and hours validity period
         If both are specified, use a plus sign (+) separator
         Use "%7[+%9]" to start at the current time
         Use "%8" to have no expiration date (for CRLs only)
SerialNumberList -- comma separated serial number list to add or remove
ObjectIdList -- comma separated extension ObjectId list to remove
@ExtensionFile -- INF file containing extensions to update or remove:
        %2
        %3 Remove CRL Distribution Points extension
        %4 Update Key Usage extension
        %5
HashAlgorithm -- Name of the hash algorithm precded by a # sign
%6 -- alternate Signature algorithm specifier

 
A minus sign causes serial numbers and extensions to be removed.
A plus sign causes serial numbers to be added to a CRL.
When removing items from a CRL, the list may contain both serial numbers
and ObjectIds. 
A minus sign before %6 causes the legacy signature format to be used. 
A plus sign before %6 causes the alternature signature format to be used. 
If %6 is not specifed then the signature format in the certificate or CRL is used.