The node you are looking for is at
certtool sec-param
.