Define PKI Services certificate templates for IdenTrust certificate types

The IdenTrust document Identrus Public Key Infrastructure and Certificate Profiles [IT-PKI] identifies and details the various certificate types used within the IdenTrust infrastructure. Using PKI Services, you create your IdenTrust compliant certificates. You decide which IdenTrust certificate types your CA creates and then define certificate templates for them. You can use the sample certificate templates provided to create your IdenTrust compliant certificates.

IdenTrust compliant certificates must include the following:
  • IdenTrust certificate policy information (needed to build the CertificatePolicies extension)
  • The location of your OCSP responder (needed to build the AuthorityInformationAccess extension)
  • Other IdenTrust required fields and extensions.
The following sample PKI Services certificate templates are provided to help you create IdenTrust compliant certificates: