Cryptographic Security Platform 1.4 - PKI Hub 1.5 installation and administration [PDF][Releases]

Under this section, add the following profile settings for each GlobalSign Certificate Center (GCC) authority.

Certificate Type

The type of issued certificate. See the table below for the supported certificates.

cert‑type	Description
PEV_SHA2	SSL certificate for Extended Validation (EV)
PV_SHA2	SSL certificate with Domain Validation (DV)
PV_INTRA	Intranet SSL certificate
PV_INTRA_SHA2	Intranet SSL certificate signed with SHA‑256
PV_INTRA_SKIP	Intranet SSL signed with SHA1 and issued with a CA-generated key pair on a P12
PV_INTRA_SKIP_SHA2	Intranet SSL signed with SHA-256 and issued with a CA-generated key pair on a P12
PV_INTRA_ECCP256	Intranet SSL (ECC P‑256) certificate
PV_CLOUD	Cloud SSL certificate
PV_CLOUD_ECC2	Cloud SSL (ECC) certificate

Mandatory: Yes

The trust model and validation rules for the requested certificate. See the table below for the supported values for each certificate type.

base-option	Trust model	Supported certificate types
gip	GlobalSign Internet PKI for publicly trusted certificate profiles	PEV_SHA2, PV_SHA2, PV_CLOUD, PV_CLOUD_ECC2
private	GlobalSign Internet PKI for non‑public or internal certificates	PV_INTRA_SKIP, PV_INTRA_SHA2, PV_INTRA_SKIP_SHA2, PV_INTRA_ECCP256
wildcard	A publicly trusted certificate that contains a wildcard SAN, such as `*.example.com`	PEV_SHA2, PV_SHA2, PV_CLOUD, PV_CLOUD_ECC2

Mandatory: No

The key size for the issued certificates. Supported values are:

Mandatory: only for the following certificate types.

The identifier of the managed SSL domain record in the GlobalSign MSSL account.

Mandatory: Yes

The default validity period for issued certificates, as a number of months.

This value is overridden by the validityPeriod enrollment request field (if included).

Mandatory: Yes

The contact details for the certificate order.

Mandatory: Yes