Description

A certificate profile is a basic template construct used to primarily restrict the shape and form of a certificate.

To this end, the most noticeable fields in the configuration screen concern purpose, key algorithms and algorithm sizes.

One of the other primary purposes of certificate profiles is to be able to define key usage, which restricts what tasks a key pair is certified to perform.

Certificate profiles is also where Certificate Transparency is configured. For more information, see Certificate Transparency or information on the Google's Certificate Transparency project.

Lastly, certificate profiles can be restricted to only work under a limited subset of CAs. Setting this value also limits the visibility of the profile to those users who have rights to all chosen CAs.

Certificate Profile Fields

For more information on each individual field, see Certificate Profile Fields.

Certificate Transparency

Certificate Transparency is a requirement for CA's issuing DV level certificates or higher and is a common feature in corporate X509 CAs as well. For more information, see Certificate Transparency Overview.

Extended Key Usages

For more information on extended key usages, see Extended Key Usages.

Custom Certificate Extensions

For more information about custom certificate extensions, see Custom Certificate Extensions.