Seems I resolved it;
tpm2_nvread --index 0x1c00002 -a 0x40000001 -o 0 --tcti $(TPM_TCTI) > nvread.1c0002.cert
tpm2_nvread --index 0x1c0000a -a 0x40000001 -o 0 --tcti $(TPM_TCTI) > nvread.1c000a.cert
emits Infineon certificates with various TCG key extensions.
tpm2_nvread --index 0x1c00002 -a 0x40000001 -o 0 --tcti $(TPM_TCTI) > nvread.1c0002.cert
tpm2_nvread --index 0x1c0000a -a 0x40000001 -o 0 --tcti $(TPM_TCTI) > nvread.1c000a.cert
emits Infineon certificates with various TCG key extensions.