Default plugin, generates 3072 bits RSA key pairs. The number of bits can be configured in
settings.json but may not be less than 2048. For
improved compatiblitity with Microsoft Exchange, RSA keys are automatically converted to the
Microsoft RSA SChannel Cryptographic Provider.
This extension can be added to the CSR with the command line option --ocsp-must-staple
The option --reuse-privatekey can be used to keep using the same
private key across different renewals, which can be useful for example with
DANE.
[--csr rsa]