feat: v0.2.1

yubikey-ca-java/README.md

@@ -4,11 +4,24 @@ ENV:
 * SIGN_REQUEST_SLOT - Sign request slot, default `82`
 
 # Generate Keypair
+> Generate `secp256r1` or `secp384r1` keypair
 
 ```shell
 $ java -jar yubikey-ca-java.jar --generate-keypair --keypair-type secp256r1
 ```
 
+# Write Keypair to Yubikey
+
+## Write private key to Yubikey
+```shell
+$ ykman piv keys import --pin-policy ONCE --touch-policy CACHED $SLOT$ private.pem
+```
+
+## Write public key to Yubikey and generate certificate
+```shell
+$ ykman piv certificates generate $SLOT$ public.pem -s 'O=Org,OU=OrgUnit,CN=CommonName'
+```
+
 # Issue ROOT CA
 
 ```shell