Sign in

v4

latestOpenAPI 3.0.32026-07-312,317012.2 MB
PKI Certificate Authorities

Create CA

post/api/v1/pki/ca

Request body

projectSlugstring required

Slug of the project to create the CA in.

type'root' | 'intermediate' required

The type of CA to create.

friendlyNamestring

A friendly name for the CA.

commonNamestring required

The common name (CN) for the CA.

organizationstring required

The organization (O) for the CA.

oustring required

The organization unit (OU) for the CA.

countrystring required

The country name (C) for the CA.

provincestring required

The state of province name for the CA.

localitystring required

The locality name for the CA.

notBeforestring

The date and time when the CA becomes valid in YYYY-MM-DDTHH:mm:ss.sssZ format.

notAfterstring

The date and time when the CA expires in YYYY-MM-DDTHH:mm:ss.sssZ format.

maxPathLengthnumber

The maximum number of intermediate CAs that may follow this CA in the certificate / CA chain. A maxPathLength of -1 implies no path limit on the chain.

keyAlgorithm'RSA_2048' | 'RSA_3072' | 'RSA_4096' | 'EC_prime256v1' | 'EC_secp384r1' | 'EC_secp521r1' | 'ML-DSA-44' | 'ML-DSA-65' | 'ML-DSA-87' | 'SLH-DSA-SHA2-128f' | 'SLH-DSA-SHA2-128s' | 'SLH-DSA-SHA2-192f' | 'SLH-DSA-SHA2-192s' | 'SLH-DSA-SHA2-256f' | 'SLH-DSA-SHA2-256s' | 'SLH-DSA-SHAKE-128f' | 'SLH-DSA-SHAKE-128s' | 'SLH-DSA-SHAKE-192f' | 'SLH-DSA-SHAKE-192s' | 'SLH-DSA-SHAKE-256f' | 'SLH-DSA-SHAKE-256s'

The type of public key algorithm and size, in bits, of the key pair for the CA; when you create an intermediate CA, you must use a key algorithm supported by the parent CA.

requireTemplateForIssuanceboolean

Whether or not certificates for this CA can only be issued through certificate templates.

Response

Default Response