/generate-intermediate-ca

post

https://api.akeyless.io/generate-intermediate-ca

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

alg

string

allowed-domains

string

Allowed domains for future leaf issuance, not inherited into the SCEP subordinate CA certificate

common-name

string

Optional Common Name for the intermediate CA certificate

delete_protection

string

Protection from accidental deletion of this object [true/false]

destination-path

string

Destination path for SCEP-issued leaf certificates. Not derived from the CA certificate item path.

enable-scep

boolean

Enable the fixed SCEP Stage 1 profile

extended-key-usage

string

Defaults to serverauth,clientauth

Extended key usage for future leaf issuance (serverauth / clientauth / codesigning)

json

boolean

Defaults to false

Set output format to JSON

max-path-len

int64

Defaults to 0

The maximum path length of the generated intermediate CA certificate

name

string

required

Base path for derived intermediate CA resources

parent-ca-name

string

Parent PKI certificate issuer name

scep-password

string

SCEP static challenge password. Request-only; never returned

split-level

int64

Defaults to 3

The number of fragments that the DFC key will be split into

token

string

Authentication token (see /auth and /configure)

ttl

string

Maximum TTL for certificates issued by the new intermediate issuer, supported formats are s,m,h,d

uid-token

string

The universal identity token, Required only for universal_identity authentication

Responses

200GenerateIntermediateCAResponse wraps the response body.

defaulterrorResponse wraps any error to return it as a JSON object with one "error" field.