AKakeyless
Certificates

POST /generate-intermediate-ca

Changed on

Request

  • Base URL
    https://api.akeyless.io
  • URL
    https://api.akeyless.io/generate-intermediate-ca
  • Auth
    none declared

Request body

algstring
allowed-domainsstring

Allowed domains for future leaf issuance, not inherited into the SCEP subordinate CA certificate

common-namestring

Optional Common Name for the intermediate CA certificate

delete_protectionstring

Protection from accidental deletion of this object [true/false]

destination-pathstring

Destination path for SCEP-issued leaf certificates. Not derived from the CA certificate item path.

enable-scepboolean

Enable the fixed SCEP Stage 1 profile

extended-key-usagestring

Extended key usage for future leaf issuance (serverauth / clientauth / codesigning)

jsonboolean

Set output format to JSON

max-path-leninteger

The maximum path length of the generated intermediate CA certificate

namestring required

Base path for derived intermediate CA resources

parent-ca-namestring

Parent PKI certificate issuer name

scep-passwordstring

SCEP static challenge password. Request-only; never returned

split-levelinteger

The number of fragments that the DFC key will be split into

tokenstring

Authentication token (see /auth and /configure)

ttlstring

Maximum TTL for certificates issued by the new intermediate issuer, supported formats are s,m,h,d

uid-tokenstring

The universal identity token, Required only for universal_identity authentication

Response

GenerateIntermediateCAResponse wraps the response body.

certificate_namestring
issuer_display_idstring
issuer_namestring
key_namestring
scep_urlstring

Changes