ezgh private-ca <command>EZGH Private CA runs your own private certificate authorities: root CAs, subordinate CAs signed by a CA in the project or by your own existing root, and the certificates they issue: from your CSR, from a key EZGH generates (exported encrypted with your passphrase), or through a CA’s private ACME directory. Certificates from a private CA are trusted only where you install its root certificate.
Roots sign only subordinate CAs: certificates come from an issuing CA under a root. CAs, their certificates and ACME bindings are in a project (--project, EZGH_PROJECT or the profile’s); CAs and bindings are named by name, slug or ID, certificates by ID.
Flags
This command also takes the global flags.
Subcommands
| Command | Description |
|---|---|
ezgh private-ca acme-binding |
A CA’s ACME External Account Bindings |
ezgh private-ca ca |
Private certificate authorities: create, issue from, revoke and delete |
ezgh private-ca certificate |
Certificates a private CA issued: show, revoke, export a generated key |