I see two common patterns of using -t switch argument for the certutil tool
certutil ... -t "CT,c,c"
and
certutil ... -t