Skip to content

Reference: certificate policies

Certificate policies define issuance rules for organizations. These include the issuing certificate authority (CA), validity period, and custom attributes.

To view policy details, in Accounts, click your account. In Policies, click the policy. Each policy includes the following.

Field Description
Policy Name Name of the policy.
Policy ID Unique identifier for API calls and protocols, such as SCEP or ACME.
Organization Name Organization the policy is associated with.
Certificate Authority CA that signs certificate requests associated with the policy.
Approval Required If approval is required for a certificate request.
Policy Enabled Allowlist defining which services or protocols can request certificates via the policy.
Validity Allowed certificate validity period ranges and maximums in years, months, or days.
Default Validity Values Default validity period if the requester doesn't choose one.
Details Subject's Distinguished Name (DN) fields, such as Common Name, Organization, and Country.
Subject Alternative Names Subject Alternative Name (SAN) types and count limits. Example types include DNS name and IP address.
Expiry Emails Recipients of renewal reminders.
Custom Extensions Additional X.509 extensions, such as Microsoft Application Policies.