AFAIK, there are no binaries available yet. I believe there will be soon. An old version (very old) of certutil is at http://developer.netscape.com:80/software/tools/pkcs/up105.html#dl. Alternatively, you can build a current version of certutil by following the instructions at http://www.mozilla.org/projects/security/pki/nss/buildnss_31.html -Ian
