CertUtil is used to resubmit pending requests, revoke certificates (more easily accomplished from the Certificate Log Utility), publish certificate revocation lists, retrieve the CA certificates, and perform a variety of other tasks. For more information, see Publishing CRLs, Examining Configuration Information, and CertUtil.
For a complete description of the syntax for each of the command line utilities see Command Line Summary.