End Entity Profiles allow narrowing down and automatically input some variables used in the certificate.

The End Entity Profile is used together with the Certificate Profile to create the certificates signed by the CA. The Certificate Profile defines the constraints of the certificate, for example what keys it can use and what the extensions will be, while the End Entity Profile defines the information in the certificate, for example country and organization.

The following covers importing and exporting End Entity Profiles and provides instructions for creating a Server End Entity Profile.

For conceptual information on End Entity Profiles, see End Entity Profiles Overview, also listing available End Entity Profiles Fields.

Export End Entity Profiles

Every non-fixed end entity profile is exported to the specified local directory as an xml file inside a zip file named entityprofiles.zip. The name of the xml file has the format entityprofile_PROFILENAME-PROFILEID.xml.

Import End Entity Profiles

All profiles to be imported should be included in a zip file. The file containing a single profile should be an xml file and its name is in the format entityprofile_PROFILENAME-PROFILEID.xml. Any file with a name that is not in this format will be ignored.

Create Server End Entity Profile

For instructions on how to create an end entity profile suitable for a web server, see Create an End Entity Profile for SSL Servers.


Related Content