Skip to main content

Create a certificate template

Define templates for your root, intermediate, and end-entity certificates.

Who can create or edit certificate templates?

To create and modify templates, you must have a user role that includes the Manage templates permission.

To create a certificate template:

  1. In DigiCert ONE, open the Managers managermenu.png menu, and select CA.

  2. Under Manage CAs, select Templates.

  3. Select Create template.

  4. Enter a Template name.

  5. Select the Certificate type that this template is meant for.

    Options include Root CA, Intermediate CA, and End-entity.

    If you select Intermediate CA, also select the Category of intermediate CA. Options include:

    • Online: Most common. Actively managed by the CA Services platform. The platform enables a full range of root certificate activity, such as automated certificate issuance, OCSP checking, and key management.

    • Unmanaged: Recommended for offline root CAs, high-security or specialized CAs, and custom PKI hierarchies. Customer is responsible for managing the intermediate CA and enabling root certificate activity.

  6. (Optional) Select an existing certificate Template to load and edit.

    These options vary based on your Certificate type selection.

  7. Paste, edit, or enter the Template body in JSON format.

    The template body is where you define all the certificate parameters supported by the template.

  8. Select the Accounts that can use this template.

  9. Select Create.

Your custom template is ready.