smallstep / certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
https://smallstep.com/certificates
Apache License 2.0
6.38k stars 417 forks source link

Option to use publicly signed cert vs self generated #1782

Open jebucha opened 3 months ago

jebucha commented 3 months ago

Hello!

Issue details

We would like the ability to configure step-ca to use a publicly signed cert from say DigiCert vs self-generated.

Why is this needed?

We are deploying via your step-certificates helm chart using an intermediate cert signed by our internal PKI and would like to be able to use a publicly signed cert to avoid needing to distribute the internally generated cert chain to all of our ~4000 ACME clients.