🔐 Certificate Configuration

Select Certificate Type

⚛️ Pure PQC

ML-DSA-65

Pure post-quantum digital signature certificates

  • ✓ 100% Quantum-Safe
  • ✓ NIST FIPS 204
  • ✓ Level 3 Security (~192-bit)
🔐 Hybrid

RSA + ML-DSA

Transitional hybrid certificates for migration

  • ✓ Dual Protection
  • ✓ Backward Compatible
  • ✓ Alternative Signatures

📋 Certificate Details

Choose the purpose of this certificate
Individual or organization
Name of person or organization
2-letter country code

📚 About Post-Quantum Certificates

ML-DSA-65 (Pure PQC)

Module-Lattice-Based Digital Signature Algorithm standardized by NIST (FIPS 204). Provides Level 3 security equivalent to AES-192.

  • Public key: ~1,952 bytes
  • Signature: ~3,309 bytes
  • Security: NIST Level 3

Hybrid RSA+ML-DSA

Combines traditional RSA with post-quantum ML-DSA for smooth migration. Provides both backward compatibility and quantum-safe protection.

  • Primary: RSA-4096/2048
  • Alternative: ML-DSA-65
  • Both signatures verified

Certificate Chain

Complete PKI hierarchy with Root CA, Intermediate CA, and End Entity certificates.

  • Root CA: 15-20 years validity
  • Intermediate CA: 10 years
  • End Entity: 3 years