Certificates and CAs

Fully featured and full flexibility
We configure Managed Keys with policies for certificate order and usage that matches your corporate policies, industry standards and good practices. This allows you to get the best and most cost effective type of certificate for each use case. For digitally signing security-validated code in your company’s name, you might chose a high-end DigiCert Code Signing certificate stored in a HSM-backed vault, but a free TLS certificate with only domain validation might be a better fit an internal web site in a non-production environment.

Support for any X.509 certificate usage

• Client/server TLS authentication
• Code signing
• Token signing/encryption
• Document signing
• …

Independent of issuer/CA and source No matter where the certificate or key comes from, we can manage it including the corresponding chain- or peer-trusts.

• ACME and API integrationsExternal/public CAs
  • DigiCert
  • Sectigo
  • ZeroSSL
  • Let’s Encrypt
• External monitor - we monitor external endpoints and react on remote certificate changes
• Internal/corporate PKI systems - we integrate with Active Directory Certificate Services and common Open Source based PKI systems
• Built-in PKI/CA in Managed Keys¹ - for fast and free certificates for devices, Kubernetes clusters etc
• Generated/self-signed - since we manage the peer-trust out-of-band, self-signed works fine for some scenarios like token signatures
• Customer/partner provided - we support cross-organizational workflows with secure uploads for scenarios where customers or partners need to provide the certificate or key.
• …