# webui.crypto.csr_profiles

Return predefined CSR profiles for common certificate types.

Each profile provides recommended defaults for key type, key length or curve, lifetime, digest algorithm, and X.509 extensions (basic constraints, key usage, extended key usage).

Type: object

##

Type: array
No Additional Items

##

#### CSRProfilesModel

Type: object
Default:
{ "HTTPS RSA Certificate": { "cert_extensions": { "BasicConstraints": { "ca": false, "enabled": true, "extension_critical": true }, "ExtendedKeyUsage": { "enabled": true, "extension_critical": true, "usages": [ "SERVER_AUTH", "CLIENT_AUTH" ] }, "KeyUsage": { "digital_signature": true, "enabled": true, "extension_critical": true, "key_agreement": true, "key_encipherment": true } }, "digest_algorithm": "SHA256", "key_length": 2048, "key_type": "RSA", "lifetime": 397 }, "HTTPS ECC Certificate": { "cert_extensions": { "BasicConstraints": { "ca": false, "enabled": true, "extension_critical": true }, "ExtendedKeyUsage": { "enabled": true, "extension_critical": true, "usages": [ "SERVER_AUTH", "CLIENT_AUTH" ] }, "KeyUsage": { "digital_signature": true, "enabled": true, "extension_critical": true } }, "digest_algorithm": "SHA256", "ec_curve": "SECP384R1", "key_type": "EC", "lifetime": 397 } }

Predefined certificate profiles for common use cases.

No Additional Properties

##

#### RSACSRExtensions

Type: object

Certificate profile configuration for HTTPS RSA certificates.

No Additional Properties

##

#### RSACSRExtensionsModel

Type: object
Default:
{ "BasicConstraints": { "ca": false, "enabled": true, "extension_critical": true }, "ExtendedKeyUsage": { "enabled": true, "extension_critical": true, "usages": [ "SERVER_AUTH", "CLIENT_AUTH" ] }, "KeyUsage": { "digital_signature": true, "enabled": true, "extension_critical": true, "key_agreement": true, "key_encipherment": true } }

Certificate extensions configuration for RSA certificates.

No Additional Properties

##

#### BasicConstraintsModel

Type: object
Default:
{ "enabled": true, "ca": false, "extension_critical": true }

Basic constraints extension configuration.

No Additional Properties

##

#### Enabled

Type: boolean Default: true

Whether the basic constraints extension is enabled.

##

#### Ca

Type: boolean Default: false

Whether this certificate can act as a certificate authority.

##

#### Extension Critical

Type: boolean Default: true

Whether this extension is marked as critical.

##

#### ExtendedKeyUsageModel

Type: object
Default:
{ "enabled": true, "extension_critical": true, "usages": [ "SERVER_AUTH", "CLIENT_AUTH" ] }

Extended key usage extension configuration.

No Additional Properties

##

#### Enabled

Type: boolean Default: true

Whether the extended key usage extension is enabled.

##

#### Extension Critical

Type: boolean Default: true

Whether this extension is marked as critical.

##

#### Usages

Type: array of string Default: ["SERVER_AUTH", "CLIENT_AUTH"]

Array of extended key usage purposes for the certificate.

No Additional Items

##### Each item of this array must be:

Type: string

##

#### RSAKeyUsageModel

Type: object
Default:
{ "enabled": true, "extension_critical": true, "digital_signature": true, "key_encipherment": true, "key_agreement": true }

Key usage extension configuration for RSA certificates.

No Additional Properties

##

#### Enabled

Type: boolean Default: true

Whether the key usage extension is enabled.

##

#### Extension Critical

Type: boolean Default: true

Whether this extension is marked as critical.

##

#### Digital Signature

Type: boolean Default: true

Whether the key can be used for digital signatures.

##

#### Key Encipherment

Type: boolean Default: true

Whether the key can be used for key encipherment.

##

#### Key Agreement

Type: boolean Default: true

Whether the key can be used for key agreement.

##

#### Key Length

Type: integer Default: 2048

RSA key length in bits.

##

#### Key Type

Type: string Default: "RSA"

Type of cryptographic key (RSA).

##

#### Lifetime

Type: integer Default: 397

Certificate validity period in days.

##

#### Digest Algorithm

Type: string Default: "SHA256"

Hash algorithm for certificate signing.

##

#### ECCCSRExtensions

Type: object

Certificate profile configuration for HTTPS ECC certificates.

No Additional Properties

##

#### ECCCSRExtensionsModel

Type: object
Default:
{ "BasicConstraints": { "ca": false, "enabled": true, "extension_critical": true }, "ExtendedKeyUsage": { "enabled": true, "extension_critical": true, "usages": [ "SERVER_AUTH", "CLIENT_AUTH" ] }, "KeyUsage": { "digital_signature": true, "enabled": true, "extension_critical": true } }

Certificate extensions configuration for ECC certificates.

No Additional Properties

##

#### BasicConstraintsModel

Type: object
Default:
{ "enabled": true, "ca": false, "extension_critical": true }

Basic constraints extension configuration.

No Additional Properties

##

#### Enabled

Type: boolean Default: true

Whether the basic constraints extension is enabled.

##

#### Ca

Type: boolean Default: false

Whether this certificate can act as a certificate authority.

##

#### Extension Critical

Type: boolean Default: true

Whether this extension is marked as critical.

##

#### ExtendedKeyUsageModel

Type: object
Default:
{ "enabled": true, "extension_critical": true, "usages": [ "SERVER_AUTH", "CLIENT_AUTH" ] }

Extended key usage extension configuration.

No Additional Properties

##

#### Enabled

Type: boolean Default: true

Whether the extended key usage extension is enabled.

##

#### Extension Critical

Type: boolean Default: true

Whether this extension is marked as critical.

##

#### Usages

Type: array of string Default: ["SERVER_AUTH", "CLIENT_AUTH"]

Array of extended key usage purposes for the certificate.

No Additional Items

##### Each item of this array must be:

Type: string

##

#### ECCKeyUsageModel

Type: object
Default:
{ "enabled": true, "extension_critical": true, "digital_signature": true }

Key usage extension configuration for ECC certificates.

No Additional Properties

##

#### Enabled

Type: boolean Default: true

Whether the key usage extension is enabled.

##

#### Extension Critical

Type: boolean Default: true

Whether this extension is marked as critical.

##

#### Digital Signature

Type: boolean Default: true

Whether the key can be used for digital signatures.

##

#### Ec Curve

Type: string Default: "SECP384R1"

Elliptic curve to use for key generation.

##

#### Key Type

Type: string Default: "EC"

Type of cryptographic key (ECC).

##

#### Lifetime

Type: integer Default: 397

Certificate validity period in days.

##

#### Digest Algorithm

Type: string Default: "SHA256"

Hash algorithm for certificate signing.

Required roles: CERTIFICATE_READ