The "Get CA Capabilities" endpoint returns the following values for each enrollment capability.

CAGeneratedKey

Generate the key in the server and return the generated key in PKCS#12 form). Individual profiles within the CA can disable this capability.

CAGeneratedKeyBackup

Back up the server-generated key.

ClientGeneratedKeyBackup

Back up the key provided by the client during the request.

EnrollmentByCSR

Support certificate signing requests.

ExtensionInCSR

Process the extension request in the CSR.

ExtensionInRequest

Process the extension request in the enrollment request.

KeyInRequest

In the enrollment request, the client can add a key for the enrollment.

PKCS12Response

Return certificates and keys in PKCS#12 form.

SANInCSR

Process the Subject Alternative Names in the CSR.

SANInRequest

Process Subject Alternative Names in the enrollment request.

SubjectNameInRequest

Use Subject Name parameters of the CSR to construct the subject's DN of the supplied order.

ValidateProofOfPossesion

Validate the proof of possession.

ValidityPeriodInRequest

Requests can supply a validity period.

X509CertificateResponse

Return certificates in X509 form.