Interoperability and Certifications

The following provides an overview of EJBCA's capabilities and support, with relevant links to documentation and external standards. 

This is a selection of the most important standards and does not cover every specification EJBCA supports.

Specifications

Certificate Formats and Standards

EJBCA supports the following formats and standards.

CRL, OCSP and Certificate Distribution

EJBCA supports the following CRL formats and standards.

Algorithms and Key Types

EJBCA supports the following algorithm types and key size/curves. When using HSMs, support is limited to a subset by the PKCS#11 provider and the specific HSM used.

Algorithm	Key Size/curve	External Reference	Documentation
RSA	Keys up to and including 8192 bits.
ECDSA	Curves including named curves from Nist, SEC, Teletrust, and X9.62. For long term stability we recommend to use the most commonly used EC curves, if no other requirements apply choose P-256/P-384/P-521. View curves... FRP256v1 brainpoolP224r1 brainpoolP224t1 brainpoolP256r1 brainpoolP256t1 brainpoolP320r1 brainpoolP320t1 brainpoolP384r1 brainpoolP384t1 brainpoolP512r1 brainpoolP512t1 c2pnb272w1 c2pnb304w1 c2pnb368w1 c2tnb239v1 c2tnb239v2 c2tnb239v3 c2tnb359v1 c2tnb431r1 prime239v1 prime239v2 prime239v3 prime256v1/secp256r1/P-256 secp224k1 secp224r1/P-224 secp256k1 secp384r1/P-384 secp521r1/P-521 sect233k1/K-233 sect233r1/B-233 sect239k1 sect283k1/K-283 sect283r1/B-283 sect409k1/K-409 sect409r1/B-409 sect571k1/K-571 sect571r1/B-571 sm2p256v1		ECDSA Keys and Signatures
EdDSA	Ed25519 Ed448	RFC8032 RFC8410	EdDSA Keys and Signatures
ML-DSA	ML-DSA-44 ML-DSA-65 ML-DSA-87	FIPS 204	Post-Quantum Keys and Signatures
ML-KEM	Supported for EE cert creation only. ML-KEM-512 ML-KEM-768 ML-KEM-1024	FIPS 203	Post-Quantum Keys and Signatures

Certificate Enrollment Protocols

For specific features supported in each protocol, see the detailed documentation.

Certifications

The following lists certifications.

Interoperability

Hardware Security Modules

The following lists support for Hardware Security Modules (HSMs). There are different APIs supporting HSMs, Java P11 Provider (legacy), P11NG, and REST APIs for some HSMs.