Certificate Authority Service overview

Certificate Authority Service is a scalable Google Distributed Cloud (GDC) air-gapped service that lets you simplify, automate, and customize the deployment, management, and security of private certificate authorities (CA). Private certificate authorities are one of the most common ways to authenticate users, machines, or services over networks. Private CAs issue digital certificates for entity identity, issuer identity, and cryptographic signatures.

With CA Service, you can create both root CAs and sub CAs:

  • Root CAs: The root CA has a self-signed certificate. This certificate type sits at the top of the certificate chain.
  • Sub CAs: The signer of the CA certificate is either another CA created in the CA Service, or an external CA.

What's next