There is a command group 'az_sphere_ca certificate'. This group of commands could 'manage certificates in your resource group and catalog'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_sphere_ca certificate_download proof'.The syntax is: az sphere ca-certificate download-proof --catalog
                                        --output-file
                                        --resource-group
                                        --verification-code
                                        [--name]. The 1th example of the child command would be to use it to 'download a proof of possession certificate using resource group and catalog name', the syntax is: az sphere ca-certificate download-proof --resource-group MyResourceGroup --catalog MyCatalog --name 2E7A0AF370ABC439901BBB37AF38B97 --verification-code 3304517c557a3375e --output-file myCert.cer. The 2th example of the child command would be to use it to 'download an active proof of possession certificate using resource group  catalog name and certificate name', the syntax is: az sphere ca-certificate download-proof --resource-group MyResourceGroup --catalog MyCatalog --verification-code 3304517c557a3375e --output-file myCert.cer. The parameter '--catalog -c' is required. It is used to the azure sphere catalog in which to perform this operation. specify azure sphere catalog name. you can configure the default azure sphere catalog using `az config set defaults.sphere.catalog=<name>`.  values from: az sphere catalog list.. The parameter '--output-file -of' is required. It is used to path and file name in which to save the certificate. specify a relative or absolute path.. The parameter '--resource-group -g' is required. It is used to name of the azure resource group. you can configure the default group using `az config set defaults.group=<name>`.  values from: az group list.. The parameter '--verification-code -v' is required. It is used to the verification code for the azure sphere security service to use when generating the certificate.. The parameter '--name -n' is optional. the certificate to download. specify name. if no name is supplied, the active certificate is downloaded.. 