ssh-keygen -f ssh_signing_key

ssh-keygen -h -s ssh_signing_key -I someid -V +365d -n hostname,hostname.example.org /etc/ssh/ssh_host_dsa_key.pub

HostCertificate /etc/ssh/ssh_host_rsa_key-cert.pub