There is a command group 'az_ad_app_credential'. This group of commands could 'manage an application s password or certificate credentials'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_ad_app_credential_reset'.The syntax is: az ad app credential reset --id
                           [--append]
                           [--cert]
                           [--create-cert]
                           [--display-name]
                           [--end-date]
                           [--keyvault]
                           [--years]. The 1th example of the child command would be to use it to 'reset an application s credential with a password', the syntax is: az ad app credential reset --id 00000000-0000-0000-0000-000000000000. The 2th example of the child command would be to use it to 'reset an application s credential with a new self signed certificate', the syntax is: az ad app credential reset --id 00000000-0000-0000-0000-000000000000 --create-cert. The 3th example of the child command would be to use it to 'append a certificate to the application with the certificate string', the syntax is: az ad app credential reset --id 00000000-0000-0000-0000-000000000000 --cert "MIICoT..." --append. The 4th example of the child command would be to use it to 'append a certificate to the application with the certificate file', the syntax is: az ad app credential reset --id 00000000-0000-0000-0000-000000000000 --cert "@~/cert.pem" --append
`cert.pem` contains the following content
-----BEGIN CERTIFICATE-----  <<< this line is optional
MIICoT...
-----END CERTIFICATE-----    <<< this line is optional. The parameter '--id' is required. It is used to identifier uri, application id, or object id.. The parameter '--append' is optional. append the new credential instead of overwriting.. The parameter '--cert' is optional. certificate to use for credentials. when used with `--keyvault,`, indicates the name of the cert to use or create. otherwise, supply a pem or der formatted public certificate string. use `@{path}` to load from a file. do not include private key info.. The parameter '--create-cert' is optional. create a self-signed certificate to use for the credential. only the current os user has read/write permission to this certificate. use with `--keyvault` to create the certificate in key vault. otherwise, a certificate will be created locally.. The parameter '--display-name' is optional. friendly name for the credential.. The parameter '--end-date' is optional. finer grain of expiry time if '--years' is insufficient, e.g. '2020-12-31t11:59:59+00:00' or '2299-12-31'.. The parameter '--keyvault' is optional. name or id of a keyvault to use for creating or retrieving certificates.. The parameter '--years' is optional. number of years for which the credentials will be valid. default: 1 year.. 