PKI Certificate Authorities

Changed on

Create CA

post/api/v1/pki/ca

Request

  • Base URL
    https://us.infisical.com
  • URL
    https://us.infisical.com/api/v1/pki/ca
  • Auth
    none declared

Request body

projectSlugstring required

Slug of the project to create the CA in.

type'root' | 'intermediate' required

The type of CA to create.

friendlyNamestring

A friendly name for the CA.

commonNamestring required

The common name (CN) for the CA.

organizationstring required

The organization (O) for the CA.

oustring required

The organization unit (OU) for the CA.

countrystring required

The country name (C) for the CA.

provincestring required

The state of province name for the CA.

localitystring required

The locality name for the CA.

notBeforestring

The date and time when the CA becomes valid in YYYY-MM-DDTHH:mm:ss.sssZ format.

notAfterstring

The date and time when the CA expires in YYYY-MM-DDTHH:mm:ss.sssZ format.

maxPathLengthnumber

The maximum number of intermediate CAs that may follow this CA in the certificate / CA chain. A maxPathLength of -1 implies no path limit on the chain.

keyAlgorithm'RSA_2048' | 'RSA_3072' | 'RSA_4096' | 'EC_prime256v1' | 'EC_secp384r1' | 'EC_secp521r1' | 'ML-DSA-44' | 'ML-DSA-65' | 'ML-DSA-87' | 'SLH-DSA-SHA2-128f' | 'SLH-DSA-SHA2-128s' | 'SLH-DSA-SHA2-192f' | 'SLH-DSA-SHA2-192s' | 'SLH-DSA-SHA2-256f' | 'SLH-DSA-SHA2-256s' | 'SLH-DSA-SHAKE-128f' | 'SLH-DSA-SHAKE-128s' | 'SLH-DSA-SHAKE-192f' | 'SLH-DSA-SHAKE-192s' | 'SLH-DSA-SHAKE-256f' | 'SLH-DSA-SHAKE-256s'

The type of public key algorithm and size, in bits, of the key pair for the CA; when you create an intermediate CA, you must use a key algorithm supported by the parent CA.

requireTemplateForIssuanceboolean

Whether or not certificates for this CA can only be issued through certificate templates.

Response

Default Response

Changes

  • 1c99090073f3Revision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

  • f10a4f8c1d41Revision changes
    • warning

      the request property's maxLength was set to 255

    • warning

      the request property's maxLength was set to 255

    • warning

      the request property's maxLength was set to 255

    • warning

      the request property's maxLength was set to 255

    • warning

      the request property's maxLength was set to 255

    • warning

      the request property's maxLength was set to 255

    • warning

      the request property's maxLength was set to 255