Home > ADSS NPKD Service > Manage Certificates > CSCA Certificates

CSCA Certificates

A CSCA is a self signed root certificate that issues certificates to national Document Signers, Master List Signers and other entities required in E-Passport PKI. This module lists all the CSCA certificates imported into NPKD Service and also provides options to import more CSCA certificates and manage these certificates. 

Clicking on CSCA Certificates inside Manage Certificates will lead us to the screen below: 

The configuration of the items are as follows: 

Item	Description
Subject DN	Subject DN displays the the identifying information of the CSCA Certificate that are part of certificate itself.
Issuer DN	Issuer DN displays the identifying information of the CA that has issued the certificate.
Valid From	This field displays the generation date and time of the CSCA certificate.
Valid To	This field displays the expiry date and time of the CSCA certificate.
Country	This field displays the country for which the CSCA Certificate has been generated.
Source	This field displays the source from where the CSCA Certificates has been imported. We can import a certificate by either:  Manual: The certificate was imported manually from the file system using 'Import CSCA Certificate' button.  ICAO PKD: The certificate was downloaded from ICAO PKD and imported into NPKD Service.
Status	This field displays the current status of the certificate that can be either 'Valid' or 'Invalid' based on ICAO conformance checks.
Import CSCA Certificates	This button allows the operator to import a CSCA Certificate locally from the file system. Clicking on this button will lead the operator to the new screen.
Make Trust Anchor	By clicking on this button, the selected CSCA Certificate will be registered as a trust anchor in ADSS Trust Manager.
View Details	By clicking on this button, a new screen showing the details of the selected certificate will be displayed.
Delete	By clicking on this button, the selected CSCA Certificate will be removed.

The CSCA Certificate can be imported locally from the system. Clicking on the 'Import CSCA Certificate' will lead you to the following screen: 



The operator can also see the details of the certificate like when and from where it was imported to NPKD etc. Clicking on the 'View Details' will lead you to the following screen: 



Clicking on the 'Search' button will display the following screen:



A particular CSCA Certificate can be searched based on Status, Subject DN, Issuer DN, Valid From, Valid To, Country and Source. If a search is based on multiple values, then these will be combined together using the “AND” operand, and thus only records that meet all the criteria will be presented.

See also