--- title: istio.v1.auth layout: protoc-gen-docs generator: protoc-gen-docs number_of_entries: 3 ---

## Services

### IstioCertificateService

Service for managing certificates issued by the CA.

    rpc CreateCertificate(IstioCertificateRequest) returns (IstioCertificateResponse)

Using provided CSR, returns a signed certificate.

## Types

### IstioCertificateRequest

Certificate request message.

Field | Type | Description | Required
--- | --- | --- | ---
`csr` | `string` | PEM-encoded certificate request. | No
`subjectId` | `string` | Optional subject ID field. | No
`validityDuration` | `int64` | Optional: requested certificate validity period, in seconds. | No

### IstioCertificateResponse

Certificate response message.

Field | Type | Description | Required
--- | --- | --- | ---
`certChain` | `string[]` | PEM-encoded certificate chain. Leaf cert is element ‘0’. Root cert is element ‘n’. | No