certificate
Type: Directory
| Parameter | Type | Description |
|---|---|---|
K | private-key | private-key |
L | crl | crl |
C | smart-card-key | smart-card-key |
A | authority | authority |
I | issued | issued |
R | revoked | revoked |
E | expired | expired |
T | trusted | trusted |
a | acme-managed | acme-managed |
D | dynamic | dynamic |
| Parameter | Type | Description |
|---|---|---|
active | switch | |
inactive | switch | |
name | string | |
trust-store | ||
digest-algorithm | enum (md5 | sha1 | sha256 | sha384 | sha512) | |
trusted | bool | |
common-name | string | |
organization | string | |
unit | string | |
locality | string | |
state | string | |
country | string | |
subject-alt-name | ||
key-size | enum (prime256v1 | secp384r1 | secp521r1 | 1024 | 1536 | 2048 | 4096 | 8192) { 1024:1024, 1536:1536, 2048:2048, 4096:4096, 8192:8192 } | |
key-usage | ubit (digital-signature, content-commitment, key-encipherment, data-encipherment, key-agreement, key-cert-sign, crl-sign, encipher-only, decipher-only, tls-server, tls-client, code-sign, email-protect, timestamp, ocsp-sign, dvcs) | |
days-valid | num |
| Parameter | Type | Description |
|---|---|---|
ca-crl-host | string | |
ca | enum | |
scep-url | string | |
fingerprint | string | |
req-fingerprint | string | |
ca-fingerprint | string | |
expires-after | time | |
challenge-password | string | |
domain-names | string | |
directory-url | string | |
acme-status | string | |
revoked | date | |
status | string | |
issuer | ||
key-type | enum (rsa | dsa | ec) | |
invalid-before | date | |
invalid-after | date | |
serial-number | string | |
akid | string | |
skid | string |