The node you are looking for is at certtool sec-param.