Usage of /usr/bin/tsa-createcertchain:
  -secret string
    	Name of the secret to create for the cert chain and private key (default "tsa-cert-chain")