While the tool tinyca2 is made to manage some simple CA - propably focusing on “inofficial” CAs with inhouse use, it can be used to create Keys and Certificate Requests for external, official CAs as well. While you can export keys and certificates in different formats, the requests have to be fetched from the internal storage of the took (aka “filesystem” ). Have a look at

~/.TinyCA/<CA-Name>/req/

ssl cert tinyca