CertConfig contains the tunables for TLS certificates
Optional
The requested 'duration' (i.e. lifetime) of the Certificate.
The amount of time before the currently issued certificate's notAfter time that we will begin to attempt to renew the certificate.
notAfter
CertConfig contains the tunables for TLS certificates