OptionaloutThe --out value from CLI (can be directory or full file path)
OptionaldefaultDefault directory if --out is not provided
Default filename (with extension) if only directory is provided
OptionalextensionFile extension to ensure (e.g., '.pem', '.csr')
OptionalcreateCreate directory if it doesn't exist
Allowed output directories (strict allowlist)
Options for resolving output path.