The node you are looking for is at certtool pkcs-cipher.