Certificate issuers

Issuers are the certificate authorities Monopam requests certificates from: its own private CAs, ACME authorities such as Let's Encrypt, Microsoft AD CS, HashiCorp Vault PKI and Apple Developer accounts.

Applies to

Who can do this

Monopam v2026.10

Administrators with permission to manage certificate issuers.

Certificate Issuers list with type, approval and status

Figure 1. Certificates → Issuers. Apple key IDs are blurred.

Type (1)

Use it for

PrivateCa

An internal CA run by Monopam, optionally with its key in an HSM. Issues certificates for internal services and devices.

Acme

Public certificates from Let's Encrypt or another ACME authority.

AdCs

A Microsoft Active Directory Certificate Services CA and template.

HashiCorpVault

A Vault PKI engine.

AppleDeveloper

Apple code-signing certificates and provisioning profiles, through an App Store Connect API key. Check connection (4) tests the key.

  1. Click Add Issuer (3) and choose the type.

  2. Enter the connection details for that type and save.

  3. Approval (2) shows whether requests to this issuer need approval. Approval rules are set in a Certificate Approval Policy.

  • Certificate inventory

  • Certificate Approval Policy

  • Device enrollment (EST and SCEP)