Private Certificate Authority

Updated 31 Jul 2026

•
def
- •
  an internal certificate authority an organization runs for itself, rather than purchasing certificates from a public Third-Party Certificate Authority
•
when it's used
- •
  needed for medium-to-large organizations with many internal web servers and privacy requirements
- •
  all of the organization's own devices must be configured to trust the internal CA
•
example tools
- •
  Windows Certificate Services, OpenCA
•
distinguish from
- •
  Self-Signed Certificate — a private CA is a whole internal CA hierarchy issuing many certificates; a self-signed certificate is a single certificate with no CA hierarchy behind it at all
•
related
- •
  Certificate Authority
- •
  Self-Signed Certificate
•
cards
- •
  Distinguish a private CA from a self-signed certificate
  - •
    A private CA is a whole internal CA hierarchy issuing many certificates; a self-signed certificate has no CA hierarchy behind it at all — it signs itself

Linked references 4