Trusted Certificates

Trusted Certificates are available in the Control Panel.

In this menu, you can upload additional trusted CA certificates that are needed should you use your own PKI infrastructure. They are used to validate SMTP server certificates and alert notification hooks - should they use SSL.

CA certificates in the Mozilla CA list i.e Firefox and Linux distributions default trusted CA list are trusted by default and is not listed here. Only CA certificate can be uploaded, that is have the Basic Constraint: ca = true flag set, so end certificates are not accepted with the exception of self-signed certificates.

Required format is X.509 certificate in PEM or DER format, usually they have the extension of .crt, .cert, .cer, .pem. The PEM encoded file starts with “-----BEGIN CERTIFICATE-----”.