SSL Certificate

A certificate represents a key pair that has been digitally signed and acknowledged by a Certifying Authority (CA). It is the most fundamental component in enabling SSL on your server.

The Generate Certificate operation creates a new self-signed certificate and adds it to the keystore. In order for browsers and other HTTP client applications to trust the SSL connection on the server, this certificate must be digitally signed by a CA and then imported into the keystore. Even though a self-signed certificate can be used to enable SSL, it is recommended that you use a self-signed certificates only on staging or development servers.

Note:

• By default, this operation generates a self-signed certificate. Once generated, you can use the Generate CSR operation to create a certificate signing request that is then signed by a CA.
• Typically, certificates are bound to a machine name. Therefore, if the name of the machine changes, you need re-generate the certificate.

{
	"alias":"<alias>"
	"keyalg":"<key algorithm>"d
	"keysize":<size>
	"sigalg":"<signature algorithm>"
	"commonName":"<common name>"
	"organizationalUnit":"<unit>"
	"organization":"<organization>"
	"city":"<city>"
	"state":"<state>"
	"country":"<country>"
	"validity":<validity>
}
			

{
	"alias":"myselfsignedcertificate"
	"keyalg":"RSA"
	"keysize":1024
	"sigalg":"SHA1withRSA"
	"commonName":"SERVER.DOMAIN.COM"
	"organizationalUnit":"development"
	"organization":"DOMAIN.COM"
	"city":"Buffalo"
	"state":"NY"
	"country":"US"
	"validity":120
}