Optional ReadonlykeyDefault "EC" (P-256, ECDSA); "RSA" is 2048 bits with PKCS#1 v1.5 and PSS.
Optional ReadonlydisplayHolder name; default "Test Signer EC (fake)" or "Test Signer RSA (fake)".
Optional ReadonlyissuerDefault "WebeSign Testing CA (fake)".
Optional ReadonlynotDefault 2025-01-01.
Optional ReadonlynotDefault 2035-01-01. Put it in the past to test CertificateNotValid.
Optional ReadonlyicpReported ICP-Brasil class (profile only; the DER has no policy).
Optional ReadonlyeidasReported eIDAS profile (profile only).
Optional ReadonlykeyDefault "hardware", like a token.
One certificate of the fake. Everything is optional; the defaults give a valid EC P-256 certificate of a fictional "Test Signer".
Example