See below for the new features in Certificate Authority for Cryptographic Security Platform 1.5.0.

Support for extended user identifiers CSP PKI CA (ATEAM-19430)

Certificate Authority now supports user identifiers longer than 13 characters and containing special characters.

Multi-data-center support for OCSP in active/hot-standby deployments (ateam-19431)

PKI Hub supports deploying a Certificate Authority with the OCSP service enabled across two data centers that share a single database, with one site operating as active and the other as hot standby.

CRL refresh after revocation (ATEAM-19461)

The Certificate Authority now refreshes CRLs shortly after a certificate revocation event instead of only once per day, aligning its behavior with PKIaaS.

User interface updates (ATEAM-19462)

The user interface has been updated as follows.

• Remove CA Administration assignment.
• Move role assignment to the PKI Hub user interface.

Support for customizing authority profiles (ATEAM-19520)

Certificate Authority now supports cloning and customizing authority profiles, not only end-entity profiles.

Improved information on profile properties (ATEAM-19534)

The CA Gateway API now reports additional properties for the profiles defined in Certificate Authority instances, including:

• allowed_extensions
• backdate
• critical_eku
• ignore_unknown_extensions
• issuer_urls
• private_key_usage_period
• self_issued
• signature_algorithm
• skip_subject_key_id
• truncate_to_ca_not_after

Support for customizing AIA in authority profiles (ATEAM-19590)

Certificate Authority supports customizing the AIA (Authority Information Access) extension in the certificate profiles.