3 ms·
Perhaps they don't give you the actual cert, but merely issue it, keep on their premises and then let you use it for unlimited signing through some sort of API
by huhtenberg 14y ago
Perhaps they don't give you the actual cert, but merely issue it, keep on their premises and then let you use it for unlimited signing through some sort of API (that enforces the subdomain restriction)?
Because if they indeed are offering CA=yes certs, that's just plain unbelievable.
- jlgaddis 14y agoMost will require that the private key be stored in an HSM (which almost certainly will be located on the customer's premises).