This is the main hostname for the certficate. This must be a FQDN and much post via CNAME or A record to a ip(s) of the cluster

These are alterntive names that can be included in the certificate, each one comma seperated must be valid and pointed at the cluster

This is the reseller that owns and has access to the certificate

This is the main email address associated with the certificate request, it will be used to auto create an account with LetsEncrypt

http-01 or dns-01, for most all requests it will be http-01 and you can leave off requests

This setting when enable will request caller id blocking on outbound calls requesting privacy settings. This may lower the ability to connect certain calls if not setup properly to support privacy settings.

For most cases this will be "yes" or "ndp" with the later being used to create ndp/endpoint specific certifcates replicated to those servers only.