There is a command group 'az_sphere_ca certificate'. This group of commands could 'manage certificates in your resource group and catalog'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_sphere_ca certificate_download'.The syntax is: az sphere ca-certificate download --catalog
                                  --output-file
                                  --resource-group
                                  [--name]. The 1th example of the child command would be to use it to 'download an active certificate using resource group and catalog name', the syntax is: az sphere ca-certificate download --resource-group MyResourceGroup --catalog MyCatalog --output-file myCert.cer. The 2th example of the child command would be to use it to 'download certificate using resource group  catalog name and certificate name', the syntax is: az sphere ca-certificate download --resource-group MyResourceGroup --catalog MyCatalog --name 2E7A0AF370ABC439901BBB37AF38B97 --output-file myCert.cer. The parameter '--catalog -c' is required. It is used to the azure sphere catalog in which to perform this operation. specify azure sphere catalog name. you can configure the default azure sphere catalog using `az config set defaults.sphere.catalog=<name>`.  values from: az sphere catalog list.. The parameter '--output-file -of' is required. It is used to path and file name in which to save the certificate. specify a relative or absolute path.. The parameter '--resource-group -g' is required. It is used to name of the azure resource group. you can configure the default group using `az config set defaults.group=<name>`.  values from: az group list.. The parameter '--name -n' is optional. the certificate to download. specify name. if no name is supplied, the active certificate is downloaded.. 