td></tr><tr><td><code>--max-workload-cert-ttl &lt;duration></code></td><td>The max TTL of issued workload certificates. (default `2160h0m0s`)</td></tr><tr><td><code>--monitoring-port &lt;int></code></td><td>The port number for monitoring Citadel. If unspecified, Citadel will disable monitoring. (default `15014`)</td></tr><tr><td><code>--org &lt;string></code></td><td>Organization for the certificate. (default ``)</td></tr><tr><td><code>--pkcs8-keys</code></td><td>Whether to generate PKCS#8 private keys.</td