Winrm server certgen command

Install certificate to the store, create winrm listener.
When do I need the thumbprint -- is it a mandatory parameter? Is this for if I'm choosing a certificate that's installed in the Windows certificate store?