See below for the capabilities supported by EJB Certificate Authorities (EJBCAs).

enrollments

See below for the enrollment-supported capabilities.

Name

Description

Endpoint

Supported

EnrollmentByCSR

Indicates that the CA supports certificate signing requests.

/v1/certificate-authorities/{caId}/enrollments

(tick)

X509CertificateResponse

Certificate can be returned in X509 form.

/v1/certificate-authorities/{caId}/enrollments

(tick)

PKCS12Response

Certificate (and key) can be returned in PKCS#12 form.

/v1/certificate-authorities/{caId}/enrollments

(tick)

SANInCSR

Subject alternative names in CSR are processed.

/v1/certificate-authorities/{caId}/enrollments

(tick)

SANInRequest

Subject alternative names in enrollment request are processed.

/v1/certificate-authorities/{caId}/enrollments

(tick)

SubjectNameInRequest

Supply subject name parameters in request to construct a subject DNin the supplied order. This applies to requests with CSR.

/v1/certificate-authorities/{caId}/enrollments

(tick)

CAGeneratedKey

Key can be generated by the CA and returned to client(P12).Individual profiles may prevent keys from being generated by the CA.

/v1/certificate-authorities/{caId}/enrollments

(tick)

KeyInRequest

Client can send a key to be used for the enrollment in the enrollment request.

/v1/certificate-authorities/{caId}/enrollments

(error)

CAGeneratedKeyBackup

Key backup can be requested if the CA generated the key.

/v1/certificate-authorities/{caId}/enrollments

(error)

ClientGeneratedKeyBackup

Key backup can be requested if the client supplies the key during the request.

/v1/certificate-authorities/{caId}/enrollments

(error)

ExtensionInCSR

Extension request in the CSR will be processed.

/v1/certificate-authorities/{caId}/enrollments

(error)

ExtensionInRequest

Extension request in enrollment request will be processed.

/v1/certificate-authorities/{caId}/enrollments

(tick)

ValidateProofOfPossesion

Validate proof of procession if requested.

/v1/certificate-authorities/{caId}/enrollments

(error)

ValidityPeriodInRequest

A validity period can be supplied in the request

/v1/certificate-authorities/{caId}/enrollments

(tick)

certificates

See below for the certificate-supported capabilities.

Name

Description

Endpoint

Supported

SearchBySerial

Lookup certificate by serial number.

/v1/certificate-authorities/{caId}/certificates/{serial}

(tick)

CertificateAction

Supported actions on a certificate.

/v1/certificate-authorities/{caId}/certificates/{serial}/actions

(error)

CertificateRevocationReason

Supported revocation reasons for the certificate RevokeAction.

/v1/certificate-authorities/{caId}/certificates/{serial}/actions

(error)

certificate-events

See below for the certificate-event-supported capabilities.

Name

Description

Endpoint

Supported

CertificateEvents

Supports certificate events.

/v1/certificate-authorities/{caId}/certificate-events

(tick)

MaxCertificateEventsPageSize

Maximum Size of content in Certificate Events Page

/v1/certificate-authorities/{caId}/certificate-events

(error)

domains

See below for the domain-supported capabilities.

Name

Description

Endpoint

Supported

VerificationMethod

Available verification methods.

/v1/certificate-authorities/{caId}/domains/{domain}

(error)

VerificationStatus

Possible domain verification status states.

/v1/certificate-authorities/{caId}/domains/{domain}

(error)

Filter

Possible domain query filters

/v1/certificate-authorities/{caId}/domains

(error)

status

See below for the status-supported capabilities.

Name

Description

Endpoint

Supported

CAStatus

Return whether the CA is up or down.

/v1/certificate-authorities/{caId}/status

(error)

ca-properties

See below for the CA property-supported capabilities.

Name

Description

Endpoint

Supported

CAPropertiesRetrieval

Retrieves CA properties

/v1/certificate-authorities/{caId}/properties

(error)