topic Re: Public CA signed certificate in General Topics

Public CA signed certificate

MP18 — Thu, 25 Oct 2018 06:08:33 GMT

Need to confirm on certificate if only CA option is checked then it is Public CA signed certificate?

which type of cert it is when only CA option is checked?

Re: Public CA signed certificate

Remo — Thu, 25 Oct 2018 06:55:34 GMT

Are you asking for a cert that you have created on your PA (or one that you have imported from a corporate CA) or a completely different cert?

Re: Public CA signed certificate

LukeBullimore — Thu, 25 Oct 2018 11:26:10 GMT

Hey @MP18

When you click the "Certificate Authority" box when generating a certificate, it means that other certificates can be signed by that certificate. For example, if you wanted a full certificate chain that is all self-signed it would be:

Root Certificate - Marked As Certificate Authority

Intermediate Certificate (Signed by Root Certificate) - Marked as Certificate Authority

Primary Certificate (Signed by Intermediate Certificate) - Not marked as Certificate Authority

Edit: and no, marking a certificate as a certificate authority does not make it a publically signed certificate - i.e. devices won't trust it.

To get a publically signed certificate, you need to generate a certificate signing request (CSR) by generating a certificate and then select "Signed by: External Authority"

Re: Public CA signed certificate

MP18 — Thu, 25 Oct 2018 13:04:28 GMT

Asking about the cert which i created on the PA.