Environment

• Operating system (including version): NixOS 25.05.20250418.2a76610 (Warbler)
• mkcert version (from mkcert -version): v1.4.4
• Server (where the certificate is loaded): n/a
• Client (e.g. browser, CLI tool, or script): n/a

What you did

mkcert -client -csr ./vsh-csr.pem -cert-file ./vsh.pem

What went wrong

ERROR: can only combine -csr with -install and -cert-file

Additional info

• main() checks that -client and -csr are not passed together
• makeCertFromCSR() checks client flag, which is always false because of the check above
• Suggestion: relax check in main() to allow passing -client to mkcert -csr invocations and enable this code path