The node you are looking for is at certtool p7-detached-sign.