> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# External CA

> Connect external Certificate Authorities to Infisical.

Integrate with External Certificate Authorities (CAs) to use existing PKI infrastructure or connect to public CAs for certificate issuance.

> [!NOTE]
>
> This page is for product admins setting up PKI infrastructure. Teams issuing certificates should see [Applications](https://infisical.com/docs/documentation/platform/pki/applications/overview.md).

## Public CAs

Public CAs issue certificates that browsers trust, for public-facing services:

> [card] [ACME-compatible CA](https://infisical.com/docs/documentation/platform/pki/ca/acme-ca.md)
>
> Connect to any CA that supports ACME, such as ZeroSSL or Buypass.

> [card] [Let's Encrypt](https://infisical.com/docs/documentation/platform/pki/ca/lets-encrypt.md)
>
> Free, automated certificates for public domains.

> [card] [DigiCert (ACME)](https://infisical.com/docs/documentation/platform/pki/ca/digicert.md)
>
> DigiCert certificates through ACME with External Account Binding.

> [card] [DigiCert (CertCentral API)](https://infisical.com/docs/documentation/platform/pki/ca/digicert-direct.md)
>
> DigiCert TLS and code signing certificates through the CertCentral Services API.

> [card] [GoDaddy](https://infisical.com/docs/documentation/platform/pki/ca/godaddy.md)
>
> Domain Validated certificates through the GoDaddy Certificates API.

> [card] [Sectigo](https://infisical.com/docs/documentation/platform/pki/ca/sectigo.md)
>
> Sectigo certificates through ACME with External Account Binding.

> [card] [AWS ACM public CA](https://infisical.com/docs/documentation/platform/pki/ca/aws-acm-public-ca.md)
>
> Publicly trusted certificates from AWS Certificate Manager.

## Private CAs

Private CAs issue certificates for internal services, from PKI you already run in the cloud or on premises:

> [card] [Microsoft ADCS](https://infisical.com/docs/documentation/platform/pki/ca/adcs.md)
>
> Microsoft AD CS over MS-WCCE through an Infisical Gateway.

> [card] [Azure ADCS (web enrollment)](https://infisical.com/docs/documentation/platform/pki/ca/azure-adcs.md)
>
> Microsoft AD CS over HTTPS web enrollment.

> [card] [AWS private CA](https://infisical.com/docs/documentation/platform/pki/ca/aws-pca.md)
>
> Private certificates from AWS Private Certificate Authority.

> [card] [Venafi TLS Protect Cloud](https://infisical.com/docs/documentation/platform/pki/ca/venafi.md)
>
> Venafi's cloud-based certificate management platform.

> [card] [Venafi TPP](https://infisical.com/docs/documentation/platform/pki/ca/venafi-tpp.md)
>
> Venafi Trust Protection Platform, on premises.

> [!NOTE]
>
> Don't see your CA? Contact [sales@infisical.com](mailto:sales@infisical.com) and we'll help you set up the integration.

## FAQ

> [accordion] Can I use both Internal CAs and External CAs together?
>
> Yes. You can have both Internal and External CAs in Infisical Certificate Management.

## What's next?

> [card] [Internal CA](https://infisical.com/docs/documentation/platform/pki/ca/private-ca)
>
> Create your own private CA hierarchy.

> [card] [Certificate Policies](https://infisical.com/docs/documentation/platform/pki/settings/policies.md)
>
> Define constraints for certificates.

> [card] [Certificate Profiles](https://infisical.com/docs/documentation/platform/pki/settings/profiles.md)
>
> Create profiles that link CAs with policies.

> [card] [Applications](https://infisical.com/docs/documentation/platform/pki/applications/overview.md)
>
> Issue certificates through Applications.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.