Figure 49: Add CA Certificate
Cert. Name
Enter the Certificate name for the CA.
Note:
It could be any name to identify this certificate. Example: “CATest”.
Key Length
Choose the key length for generating the CA certificate.
The following values are available:
●
512:
512-bit keys are not secure and it's better to avoid this option.
●
1024
: 1024-bit keys are no longer sufficient to protect against attacks.
●
2048:
2048-bit keys are a good minimum. (Recommended).
●
4096:
4096-bit keys are accepted by nearly all RSA systems. Using 4096-bit keys will dramatically increase
generation time, TLS handshake delays, and CPU usage for TLS operations.
Digest Algorithm
Choose the digest algorithm:
●
SHA1:
This digest algorithm provides a 160-bit fingerprint output based on arbitrary-length input.
●
SHA256:
This digest algorithm generates an almost unique, fixed-size 256 bit hash.
Note:
Hash is a one-way function, it cannot be decrypted back.
Expiration (D)
Enter the validity date for the CA certificate in days.
In our example, set to “120”.
Country / Region
Select a country code from the dropdown list.
Example: “MA”.
State / Province
Enter a state name or province.
Example: “Casablanca”.
City
Enter a city name.
Example: “Casablanca”.
Organization
Enter the organization’s name.
Example: “GS”.
