OptionaldirOptionalforceAlways create a new cert, even if one exists and is valid.
OptionalhostHostname(s) for cert. Used for subject CN, DNS subjectAltName, or IP subjectAltName if IP address. If array, the first name will be the CN, and all names will be added as SANs.
OptionalminMinimum number of days the server can run. Ensure the cert will be good at least this long.
OptionalnoIf true, do not read the key.
OptionalnotCertificate invalid after this many days, server restart required.
OptionaltempIf true, do not write any files.
Relative to cwd.