step ca policy acme x509 deny
step ca policy acme x509 deny -- manage denied names for X.509 certificate issuance policies
step ca policy x509 deny <subcommand> [arguments] [global-flags] [subcommand-flags]
step ca policy x509 deny command group provides facilities for managing X.509 names to be denied.