Configure the following settings in the Profile Options form of the Create wizard.

Certificate Signing Request (CSR)

The PEM or Base64 encoding of a CSR (Certificate Signing Request).

This field is only present when the selected certificate profile issues certificates from CSR. In this issuance mode:

  • The user generates the key pair and the CSR.
  • The CA processes the CSR and issues the certificate.
  • The user downloads the certificate.

When selecting Apache, Nginx, or Microsoft IIS certificate destinations, Certificate Hub ignores any client-generated CSR and uses instead a CSR generated at the destination along with the key pair.

Password

A password for the generated P12. 

This field is only present when the selected certificate profile issues certificates in P12 files. In this issuance mode:

  1. The CA generates the key pair.
  2. The user downloads both the certificate and the private key in a P12 file protected with the selected password.

Requested Properties

Additional properties of the selected profile (if any).

Subject Alternative Names

The list of subject alternative names (SAN) for the certificate. 

Subject DN for CSR

The distinguished name of the certificate subject. This field is mandatory when:

  • The selected certificate profile issues certificates from CSRs, and
  • The Use Subject DN from CSR checkbox is not marked.