While the tool tinyca2 is made to manage some simple CA - propably focusing on “inofficial” CAs with inhouse use, it can be used to create Keys and Certificate Requests for external, official CAs as well. While you can export keys and certificates in different formats, the requests have to be fetched from the internal storage of the tool (aka “filesystem” ). Have a look at

~/.TinyCA/<CA-Name>/req/

ssl cert tinyca