new-key = true
key-type = ecdsa
no-reuse-key = true
rsa-key-size = 4096
elliptic-curve = secp384r1

must-staple = true