Skip to main content

Set up your CA hierarchy

A CA hierarchy is the chain of certificate authorities (CAs) that issue and vouch for the certificates in your private PKI. In DigiCert® Private CA, you build the hierarchy by creating or importing root CAs and intermediate CAs.

Recommended order of work

  • Create or import a root CA.

  • Create or import one or more intermediate CAs under it.

  • Set up certificate validation (CRL, OCSP, and AIA) for your CAs. See Set up certificate validation infrastructure.

  • Issue certificates.

Each CA you add uses a license. See Licensing.