You need a credentials truststore for SSL communication with the Sectigo API.

See com.SectigoCA for how to set this truststore in the CA Gateway configuration.

To create the truststore for authenticating with the Sectigo API

  1. Open a browser to the following URL.
    https://cert-manager.com/customer/<customer-uri>
    Where <customer-uri> matches the customer-uri value you will configure on the com.SectigoCA settings.
  2. Click the lock icon beside the URL in the address bar and export the certificate chain. 
  3. Create a truststore containing the exported certificates. For example, use the openssl pkcs12 command to create a PKCS #12-type truststore.
    openssl pkcs12