---
title: "ezgh private-ca"
description: "Private CA: private certificate authorities and the certificates they issue."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ezgh private-ca

{/* Generated by ezgh-cli's internal/tools/clidocs from the ezgh command tree. Don't edit: change the command's help in ezgh-cli and regenerate. */}

```sh
ezgh private-ca <command>
```

EZGH Private CA runs your own private certificate authorities: root CAs, subordinate CAs signed by a CA in the project or by your own existing root, and the certificates they issue: from your CSR, from a key EZGH generates (exported encrypted with your passphrase), or through a CA's private ACME directory. Certificates from a private CA are trusted only where you install its root certificate.

Roots sign only subordinate CAs: certificates come from an issuing CA under a root. CAs, their certificates and ACME bindings are in a project (`--project`, `EZGH_PROJECT` or the profile's); CAs and bindings are named by name, slug or ID, certificates by ID.

## Flags

This command also takes the [global flags](/cli/reference#global-flags).

## Subcommands

| Command | Description |
| --- | --- |
| [`ezgh private-ca acme-binding`](/cli/reference/private-ca-acme-binding) | A CA's ACME External Account Bindings |
| [`ezgh private-ca ca`](/cli/reference/private-ca-ca) | Private certificate authorities: create, issue from, revoke and delete |
| [`ezgh private-ca certificate`](/cli/reference/private-ca-certificate) | Certificates a private CA issued: show, revoke, export a generated key |

Source: https://docs.ezghcloud.com/cli/reference/private-ca/index.mdx