Certificate Parameter (platCrypto-CertificateParameter)

You can add Certificate Parameters to a signing profile to define default values for any fields that may be unspecified in the incoming CSR. A validation error will be thrown if the incoming CSR defined a different value, causing the signing request to be rejected.

To use the Certificate Parameter components, drag them from those available in the signingService palette beneath a Signing Profile underneath the Signing Service in a running station.

Image

Example parameters available in the signingService palette include:

  • Key Type – RSA/EC
  • Key Size – specify an exact required key size
  • Minimum Key Size – specify a minimum required key size
  • EC Curve – specify the curve name for an ecliptic curve key
  • DN – define the full/partial distinguished name attribute values
  • DN field parameter – define a single distinguished name attribute value
Image

Property Value Description
Parameter Type read-only Displays the name of the certificate parameter.
Value string Defines the value of the certificate parameter.
Dn Field string Defines the name of the DN field to populate. Specific to CertificateDnField type parameter.