{# TODO make CRL repos and cert repos browsable #}

Architecture: {{ arch_services.arch }}

All certificates (.zip): download

Certificates by issuer

{% for iss in arch_services.certs_by_issuer %}
{{ iss }}
    {% for cert_info in arch_services.certs_by_issuer[iss] %}
  • {{ cert_info.spec.label }}
    {{ cert_info.subject_dn }}
    PEMDER
  • {% endfor %}
{% endfor %}

Attribute certificates by issuer

{% for iss in arch_services.attr_certs_by_issuer %}
{{ iss }}
    {% for cert_info in arch_services.attr_certs_by_issuer[iss] %}
  • {{ cert_info.spec.label }}
    {{ cert_info.holder_dn }}
    PEMDER
  • {% endfor %}
{% endfor %}

Download PKCS #12 (.pfx) bundles

Choose a certificate label that you want to download together with its issuance chain and private key. You can optionally set a passphrase.

Time stamping endpoints (RFC 3161 protocol)

{% if arch_services.tsa %} {% else %}

No TSA services

{% endif %}

OCSP responder endpoints

{% if arch_services.ocsp %} {% else %}

No OCSP services

{% endif %}

Certificate revocation lists

{% if arch_services.crl %} {% else %}

No CRL repositories

{% endif %}

Certificate repositories

{% if arch_services.cert_repo %} {% else %}

No certificate repositories

{% endif %}

Attribute certificate repositories

{% if arch_services.attr_cert_repo %} {% else %}

No attribute certificate repositories

{% endif %}