Subscriptions

Here you can add/view multiple mTLS certificates that can be linked to your application(s).

Clicking Add certificate allows you to add a new certificate.
Copy-paste your PEM certificate chain in this order: Root → Intermediate → Leaf and Name of your certificate.

🚧
The format must comply to the Textual Encoding of Certificates, you must copy and paste the whole chain of certificates, not just the leaf certificate.

Click Save.

In Sandbox you may use our example certificate:

⤓ TLS-cert.pem ⤓ TLS-key.pem

or create one:

Add a public certificate to your application.
You can open the public certificate file using any word processor like Microsoft word, notepad or any text editor.
Copy the content of the public certificate in the Certificate field and click Save.

If you do not have a certificate. You can create one using the below openssl snippet using a command prompt or command line.

$ openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365

Field	Description
openssl	Command to run OpenSSL
req	OpenSSL utility for generating a CSR
newkey rsa: 4096	Asks OpenSSL to generate a new 2048-bit RSA private key. If you prefer a 4096-bit key, you can change this number to 4096.
keyout key.pem	Specifies the path to save the private key file.
out cert.pem	Specifies the path to save the public certificate file .
days	Specifies the validity of the certificate. The certificate is from the date of generation till 365 days.

🚧
The example and self signed certificates are only for use in Sandbox, it is not allowed to use these in Production.