OptionalcaOptionalcaMinimum number of days left on CA cert.
OptionalcaCA certificate not valid after this many days.
OptionalcaSubject Distinguished Name for CA.
OptionalcertRelative to cwd.
OptionalforceAlways create a new CA cert, even if one exists and is valid.
OptionalforceAlways create a new certificate, even if one exists and is valid.
OptionalhostHostname for cert. Used for subject CN, DNS subjectAltName.
OptionalminMinimum number of days the server can run. Ensure the cert will good at least this long.
OptionalnoIf true, do not read the key.
OptionalnotCertificate invalid after this many days, server restart required.
OptionaltempIf true, do not write any files.
Relative to cwd.