Issues one enrolled certificate (ACME, EST, SCEP) from a family's Issuing CA and records its serial so OCSP and the CRL can answer for it.
The caller decides the subject and names; this adds the profile's extensions and the CA's CDP and AIA, and never reads a CSR.
the realm
the family's use case
publicKeyPem, profile, subject, subjectAltName and days
publicKeyPem
profile
subject
subjectAltName
days
a promise of what issueUnder() answers
issueUnder()
Issues one enrolled certificate (ACME, EST, SCEP) from a family's Issuing CA and records its serial so OCSP and the CRL can answer for it.
The caller decides the subject and names; this adds the profile's extensions and the CA's CDP and AIA, and never reads a CSR.