Settings

Configure default CA certificates for signing operations

Quick Setup: Create CA Certificates

Generate a complete certificate authority hierarchy (Root CA + Issuing CA) for development and testing

Default Root CA

No default root CA configured

Default Issuing CA

No default issuing CA configured

Display Settings

Display a warning banner on certificate creation pages to remind users not to use these certificates in production environments

Public Hostname

Optional: Set your public hostname (e.g., https://certs.example.com) to use in CDP URLs and other generated links. If not set, the current browser URL will be used.

Include the protocol (https://) and do not add a trailing slash

Subject Information Defaults

Set default values for certificate subject fields in the Sign Certificate page

Saved CA Certificates

⚠️ Security Warning: Private Key Storage

  • Private keys stored here are encrypted but still vulnerable to XSS attacks
  • Any malicious JavaScript on this page could potentially access your keys
  • Browser extensions may have access to localStorage data
  • For production use: Upload CA files on each use instead of storing them
  • Best practice: Use hardware security modules (HSM) or key management services

Recommendation: Only store private keys here for development/testing purposes. For production certificate authorities, use proper key management infrastructure.

No CA certificates configured. Add a CA to get started.