gistfile1.txt

vault write --format=json \
    ca-hot/roles/test-role \
    allowed_domains=${hot_domain} \
    allow_subdomains=false \
    server_flag=false \
    client_flag=false \
    email_protection=true \
    key_type=ec \
    key_bits=256 \
    basic_constraints_valid_for_non_ca=true \
    max_ttl=72h