A CSCA is a self signed root certificate that issues certificates to national Document Signers, Master List Signers and other entities required in E-Passport PKI. This module lists all the CSCA certificates imported into NPKD Service and also provides options to import more CSCA certificates and manage these certificates. 

Clicking on CSCA Certificates inside Manage Certificates will lead us to the screen below: 



The configuration of the items are as follows: 

Items

Description

Subject DN

Subject DN displays the the identifying information of the CSCA Certificate that are part of certificate itself.

Issuer DN

Issuer DN displays the identifying information of the CA that has issued the certificate. 

Valid From

This field displays the generation date and time of the CSCA certificate.

Valid To

This field displays the expiry date and time of the CSCA certificate.

Country

This field displays the country for which the CSCA Certificate has been generated.

Source

This field displays the source from where the CSCA Certificates has been imported. We can import a certificate by either: 

  • Manual: The certificate was imported manually from the file system using 'Import CSCA Certificate' button.
  • ICAO PKD: The certificate was downloaded from ICAO PKD and imported into NPKD Service.

Status

This field displays the current status of the certificate that can be either 'Valid' or 'Invalid' based on ICAO conformance checks.

Import CSCA Certificates

This button allows the operator to import a CSCA Certificate locally from the file system. Clicking on this button will lead the operator to the new screen.  

Make Trust Anchor

By clicking on this button, the selected CSCA Certificate will be registered as a trust anchor in ADSS Trust Manager. 

View Details

By clicking on this button, a new screen showing the details of the selected certificate will be displayed. 

Delete

By clicking on this button, the selected CSCA Certificate will be removed. 


The CSCA Certificate can be imported locally from the system. Clicking on the 'Import CSCA Certificate' will lead you to the following screen: 



The operator can also see the details of the certificate like when and from where it was imported to NPKD etc. Clicking on the 'View Details' will lead you to the following screen: 



Clicking on the 'Search' button will display the following screen:



A particular CSCA Certificate can be searched based on Status, Subject DN, Issuer DN, Valid From, Valid To, Country and Source. If a search is based on multiple values, then these will be combined together using the “AND” operand, and thus only records that meet all the criteria will be presented.

If "_" character is used in the search then it will act as wildcard.


See also

DS Certificates