Specification
Cloud-based PKI as a Service (PKIaaS)
Hosted Issuing Certificate Authority with online root, issuing CA, and OCSP service
REST API and web console certificate management
Hardware Security Module (HSM) protection - FIPS 140-2 Level III
Supports RSA and EC subscriber certificate key algorithms
Certificate issuance, renewal, and revocation
Enrollment Gateway Services (WSTEP, SCEP, Intune, ACME, MDM, Smart Card, Code Signing, S/MIME)
Certificate Enrollment Gateway (CEG) for on-premises automation
Online root CA and issuing CA provisioning
Default validity: 20 years (root CA), 10 years (issuing CA)
High availability, automated lifecycle management, audit logging
1-year subscription term
Supports 1-9 issuing CAs tier
