anchor.diff:  [-E <KeyValuePair>] [--keysize <bits>] [--out <file_path>]
   [--pass <password>]
   )
  +
  +| http
  +
   [-h, --help] ([-s, --silent] | [-v, --verbose])
   --------------------------------------------------
   
   [float]
   === Description
   
  -You can specify one of the following modes: `ca`, `cert`, `csr`. The
  +You can specify one of the following modes: `ca`, `cert`, `csr`, `http`. The
   `elasticsearch-certutil` command also supports a silent mode of operation to
   enable easier batch operations.
   
  
positive.code: == elasticsearch-certutil
  
  The `elasticsearch-certutil` command simplifies the creation of certificates for
  use with Transport Layer Security (TLS) in the Elastic Stack.
  
  [float]
  === Synopsis
  
negative.code: private key.
  
  [float]
  [[certutil-http]]
  ==== HTTP mode
  
  The `http` mode guides you through the process of generating certificates for
  use on the HTTP (REST) interface for {es}. It asks you a number of questions in
  order to generate the right set of files for your needs. For example, depending
  on your choices, it might generate a zip file that contains a certificate
  authority (CA), a certificate signing request (CSR), or certificates and keys
  for use in {es} and {kib}. Each folder in the zip file contains a readme that
  explains how to use the files.
  
  [float]
  === Parameters
  
  `ca`:: Specifies to generate a new local certificate authority (CA). This
  