Replace deprecated pki-server subsystem-cert-* commands

The pki-server subsystem-cert-find and pki-server subsystem-cert-show
commands have been deprecated. They should be replaced with subsystem-
specific commands like pki-server ca-cert-find and pki-server ocsp-cert-show.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: edewata

.github/workflows/ocsp-basic-test.yml

@@ -102,11 +102,11 @@ jobs:
 
       - name: Check CA system certs
         run: |
-          docker exec pki pki-server subsystem-cert-find ca
-          docker exec pki pki-server subsystem-cert-show ca signing
-          docker exec pki pki-server subsystem-cert-show ca ocsp_signing
-          docker exec pki pki-server subsystem-cert-show ca sslserver
-          docker exec pki pki-server subsystem-cert-show ca subsystem
+          docker exec pki pki-server ca-cert-find
+          docker exec pki pki-server ca-cert-show signing
+          docker exec pki pki-server ca-cert-show ocsp_signing
+          docker exec pki pki-server ca-cert-show sslserver
+          docker exec pki pki-server ca-cert-show subsystem
 
       - name: Check security domain config in CA
         run: |
@@ -182,10 +182,10 @@ jobs:
 
       - name: Check OCSP system certs
         run: |
-          docker exec pki pki-server subsystem-cert-find ocsp
-          docker exec pki pki-server subsystem-cert-show ocsp signing
-          docker exec pki pki-server subsystem-cert-show ocsp sslserver
-          docker exec pki pki-server subsystem-cert-show ocsp subsystem
+          docker exec pki pki-server ocsp-cert-find
+          docker exec pki pki-server ocsp-cert-show signing
+          docker exec pki pki-server ocsp-cert-show sslserver
+          docker exec pki pki-server ocsp-cert-show subsystem
 
       - name: Check PKI server base dir after installation
         run: |
@@ -564,7 +564,7 @@ jobs:
 
           docker exec pki pki pkcs12-import \
               --pkcs12 /root/.dogtag/pki-tomcat/ca_admin_cert.p12 \
-              --pkcs12-password Secret.123
+              --password Secret.123
 
       - name: Prepare initial cert
         run: |