Skip to main content
To issue a certificate with Infisical, you create a certificate profile and a certificate template to go along with it. You then issue a certificate against a specific profile depending on the enrollment method associated with it. There are three components to understand:
  • Certificate Profile: A configuration set specifying how certificates should be issued under that profile including the issuing CA, a certificate template, and the enrollment method (such as ACME, EST, API, etc.) used to enroll certificates.
  • Certificate Template: A policy structure specifying the permitted attributes for requested certificates including subject naming conventions, SAN fields, key usages, and extended key usages.
  • Certificate: The actual X.509 certificate issued for a profile. Once issued, a certificate kept track of in the certificate inventory.