Create Certificate Profile

Basic Information

Profile Name *

Unique name for this certificate profile

Certificate Policy

High-level policy governing this profile

Description

Allowed Key Types *

RSA Elliptic Curve (EC)

Minimum RSA Key Size

Maximum Validity (Days) *

Maximum certificate lifetime in days (825 days max for public trust)

Allow custom validity periods

This is a Certificate Authority (CA) Profile

Allowed Subject Alternative Name (SAN) Types

DNS Names IP Addresses Email Addresses URIs

Allow wildcard SAN entries (*.example.com)

Require Common Name in subject

Subject Template (JSON)

JSON template for certificate subject. Use for dynamic values.

Extended Key Usage (EKU)

TLS Server Auth TLS Client Auth Code Signing Email Protection Time Stamping OCSP Signing

Include Policy OID in certificate

Custom Policy OID

Include CRL Distribution Points

Include Authority Information Access

Require Certificate Transparency

Auto-approve requests

Allow certificate renewal