You can upload SSL certificates you have bought from third parties to CCM and manage all your certificates in one place. For those external certificates, you can query and manage them.
You can deploy an SSL certificate to other services (such as ELB and WAF) you subscribe in just a few clicks.
You can easily manage CAs and certificates without having to build or maintain complex CA infrastructures.
You can create a flexible CA hierarchy, including root CAs and subordinate CAs. External CAs are also supported to meet the deployment requirements of more applications.
PCA allows you to centrally manage certificates and keys. It can manage millions of certificates, and quickly notify tenants of certificate status using the CRL to prevent certificate expiration.
PCA supports different key algorithms, such as RSA_2048, RSA_4096, EC_P256, and EC_P384. It supports the x.509 v3 certificate format and complies with the PKI and CA international standards.
PCA uses Key Management Service (KMS) to store keys securely.
PCA provides you with great flexibility through abundant APIs that allow you to efficiently integrate and deploy products in the development environment.