The name of the SSH certificate issuer

The username to sign in the SSH certificate

Set output format to JSON

Set this option to output legacy ('ssh-rsa-cert-v01@openssh.com') signing algorithm name in the certificate.

SSH public key file contents. If this option is used, the certificate will be printed to stdout

Authentication token (see /auth and /configure)

Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)

The universal identity token, Required only for universal_identity authentication