anchor.diff:  
   `csr`:: Specifies to generate certificate signing requests. This parameter
   cannot be used with the `ca` or `cert` parameters.
  +
  +`http`:: Generates a new certificate or certificate request for the {es} HTTP
  +interface.
   
   `--ca <file_path>`:: Specifies the path to an existing CA key pair
   (in PKCS#12 format). This parameter cannot be used with the `ca` or `csr` parameters.
  
positive.code: private key.
  
  [float]
  === Parameters
  
  `ca`:: Specifies to generate a new local certificate authority (CA). This
  
negative.code: [-E <KeyValuePair>] [--keysize <bits>] [--out <file_path>]
  [--pass <password>]
  )
  
  | http
  
  [-h, --help] ([-s, --silent] | [-v, --verbose])
  --------------------------------------------------
  
  [float]
  === Description
  
  You can specify one of the following modes: `ca`, `cert`, `csr`, `http`. The
  `elasticsearch-certutil` command also supports a silent mode of operation to
  enable easier batch operations.
  
  