Under profiles.<profile>, add a properties section with the following GlobalSign Certificate Center (GCC)-specific settings.
cert-type
The type of issued certificate. See the table below for the supported certificates.
cert‑type | Description |
|---|---|
PEV_SHA2 | SSL certificate for Extended Validation (EV) |
PV_SHA2 | SSL certificate with Domain Validation (DV) |
PV_INTRA | Intranet SSL certificate |
PV_INTRA_SHA2 | Intranet SSL certificate signed with SHA‑256 |
PV_INTRA_SKIP | Intranet SSL signed with SHA1 and issued with a CA-generated key pair on a P12 |
PV_INTRA_SKIP_SHA2 | Intranet SSL signed with SHA-256 and issued with a CA-generated key pair on a P12 |
PV_INTRA_ECCP256 | Intranet SSL (ECC P‑256) certificate |
PV_CLOUD | Cloud SSL certificate |
PV_CLOUD_ECC2 | Cloud SSL (ECC) certificate |
Mandatory: Yes
base-option
The trust model and validation rules for the requested certificate. See the table below for the supported values for each certificate type.
base-option | Trust model | Supported certificate types |
|---|---|---|
gip | GlobalSign Internet PKI for publicly trusted certificate profiles | PEV_SHA2, PV_SHA2, PV_CLOUD, PV_CLOUD_ECC2 |
private | GlobalSign Internet PKI for non‑public or internal certificates | PV_INTRA_SKIP, PV_INTRA_SHA2, PV_INTRA_SKIP_SHA2, PV_INTRA_ECCP256 |
wildcard | A publicly trusted certificate that contains a wildcard SAN, such as | PEV_SHA2, PV_SHA2, PV_CLOUD, PV_CLOUD_ECC2 |
Mandatory: No
key-size
The key size for the issued certificates. Supported values are:
- 2048
- 4096
Mandatory: only for the following certificate types.
- PV_INTRA_SKIP_SHA2
- PV_INTRA_ECCP256
domain-id
The identifier of the managed SSL domain record in the GlobalSign MSSL account.
Mandatory: Yes
validity-months
The default validity period for issued certificates, as a number of months.
This value is overridden by the validityPeriod enrollment request field (if included).
Mandatory: Yes
contact
The contact details for the certificate order.
- phone
- first-name
- last-name
Mandatory: Yes
campaign
Analytics tag to associate certificate orders with a specific campaign or cost center.
Mandatory: No.
coupon
Promotional coupon code applied through the reseller billing system, not the GlobalSign CA.
Mandatory: No.