Human-readable description of the preset
OptionalorganizationalOrganizational unit(s) to include in subject
OptionalvalidityCertificate validity period override
OptionalextensionsX.509 extension flags
OptionalserverAuth?: booleanInclude TLS Web Server Authentication EKU
OptionalclientAuth?: booleanInclude TLS Web Client Authentication EKU
OptionalvariablesInteractive variables for dynamic presets
OptionalsubjectSubject Alternative Name templates
SAN templates with variable placeholders
OptionalcountryOverride default country code
OptionalorganizationOverride default organization name
OptionalsanitizeOverride filename sanitization behavior
OptionalkeysKey algorithm override for this preset
Algorithm type
Optionalsize?: 2048 | 4096RSA key size (only for rsa)
Optionalcurve?: "P-256" | "P-384" | "P-521"ECDSA curve (only for ecdsa)
Preset configuration for quick CSR generation. Presets bundle common settings for specific use cases (web, vpn, mTLS, etc.).