For each custom Sectigo CA profile property, click +Sectigo CA profile properties and fill the following fields.

Choose a key name

New Value

The parameter name without quotation marks

The parameter value enclosed in quotation marks

See below for examples: 

key_types

A list of supported key types for the issued certificate. For example:

"key_types": "{\"EC\":[\"P-256\",\"P-384\"],\"RSA\":[\"2048\",\"4096\",\"8192\"]}"

Each list must be enclosed in square brackets [].

As described in the table below, the requested validity (if any) must be included on this list.

Request type

Requested key type

Key type for the issued certificate

​PKCS #10

​Included in the key-types list

As selected in the request​

Not included in the key-types list

Error

PKCS #12

—

The first in the key-types list, if key-type is not available, uses default.

Mandatory: No, this optional value defaults to a list containing a single RSA 2048 key type.

terms

A comma-separated list of supported certificate validity periods (in days). . For example:

"terms": "[47, 200, 365, 397]"

The list must be enclosed in square brackets [].

As described in the table below, the requested validity (if any) must be included on this list.

Request type

Requested validity

Validity of the issued certificate

​PKCS #10

​Included in the terms list

As selected in the request​

Not included in the terms list

Error

None

The first in the term list, if term list not available, uses default.

PKCS #12

—

The first in the term list, if term list not available, uses default.

 Mandatory: No, this optional value defaults to a list containing a single 30-day period.