Maintained with ☕️ by
IcePanel logo

Certificate Authority Service is now generally available with the following new features

Share

Services

## Announcement Certificate Authority Service is now [generally available](https://cloud.google.com/products/#product-launch-stages) with the following new features. * **Certificate authority (CA) pools**: A CA pool is a container for multiple CAs with a common certificate issuance policy and IAM policy. More information: [Overview of CA pools](https://cloud.google.com/certificate-authority-service/docs/ca-pool). * **Certificate templates**: Certificate templates are reusable and parameterized schemas for common certificate issuance scenarios. The reusable configs feature has been retired, and certificate template replaces it. More information: [Certificate templates](https://cloud.google.com/certificate-authority-service/docs/certificate-template). * **Identity reflection**: Identity reflection is a special certificate issuance mode that limits an unprivileged certificate requester. With the identity reflection mode, the unprivileged certificate requester can only request certificates with a SAN corresponding to the identity in their credential. More information: [Using identity reflection](https://cloud.google.com/certificate-authority-service/docs/using-identity-reflection). * **Updates to CA states**: A new state called `STAGED` has been added to the list of CA states. The new set of CA states can be found here: [Certificate authority states](https://cloud.google.com/certificate-authority-service/docs/certificate-authority-states). * **New locations**: CA Service has expanded the list of locations where you can create your resources. For the complete list of locations, see [Locations](https://cloud.google.com/certificate-authority-service/docs/locations). In addition to the above features, Certificate Authority Service has the following updates as part of the GA release. * **Pricing**: CA Service offers a simple pay-as-you-go pricing model. Large volume customers can also avail the subscription-based pricing model. More information: [Pricing](https://cloud.google.com/certificate-authority-service/pricing). * **Service Level Agreement (SLA)**: SLA for CA Service is now publicly available and offers 99.9% availability per region for certificate creation. More information: [SLA](https://cloud.google.com/certificate-authority-service/sla). * **Compliance**: CA Service meets ISO 27001, 27017, 27018, SOC1, SOC2, SOC3, BSI C5, and PCI compliance standards.