Create Intermediate CA

A CA signed by a root or another intermediate. Issues leaf certs.

Intermediate CA Certificate: A CA that sits between the root and leaf certs. The root signs the intermediate; the intermediate signs leaf certs.
Isolates the root from day-to-day operations — if an intermediate is compromised, the root can revoke it without invalidating everything.

Certificate Details

Issuing CA

Label (display name inside PKILab)

Common Name (CN)

The name verifiers will see as the issuer on leaf certificates.

Organization (O)

Country (C)

Key Type

Key Size

Validity (days)

Intermediates typically last 5 years (1825 days).

Path Length Constraint

0 = can only issue leaf certs; 1 = can issue one more intermediate level.

Cancel