auth2ecdsap256ca=" certmapping:yes|no catype:root|intermediate (default=root) certhash: followrenewal:yes|no (default=no) ...

      [auth2ecdsap256ca=" [certmapping:yes|no]
         [catype:root|intermediate (default=root)]
         [certhash:]
         [followrenewal:yes|no (default=no)] [certeku:]
         [certname:] [certnametype:]
         [certcriteriatype:]
         | ..."]
      [auth2ecdsap384ca=" [certmapping:yes|no]
         [catype:root|intermediate (default=root)]
         [certhash:]
         [followrenewal:yes|no (default=no)] [certeku:]
         [certname:] [certnametype:]
         [certcriteriatype:]
         | ..."]
      [qmpfs=dhgroup1|dhgroup2|dhgroup14|dhgroup24|ecdhp256|ecdhp384|
         mainmode|none (default=none)]
      [qmsecmethods=authnoencap:+[valuemin]+[valuekb]|
         ah:+esp:-+[valuemin]+[valuekb]
         |default]
      [exemptipsecprotectedconnections=yes|no (default=no)]
      [applyauthz=yes|no (default=no)]