Certificate manager

A computer-implemented method, comprising:

• obtaining, at a certificate management service of a computing resource service provider and from an interface for creating a private certificate authority and performing an operation to one or more certificates, a first request to create a first private certificate authority over a first communication channel within a first network provided by the computing resource service provider and associated with an account of the computing resource service provider;
• provisioning, by the certificate management service, within the first network, a computer system to operate as the first private certificate authority in accordance with a parameter specified with the first request;
• obtaining, through an application programming interface at the certificate management service, a second request to perform an operation to a digital certificate of the one or more digital certificates;
• identifying, by the certificate management service, from a plurality of certificate authorities that includes a public certificate authority and a second private certificate authority, that the second private certificate authority issued the digital certificate and is:
• provisioned at least in part by the certificate management service;
• and
• accessible, through the application programming interface, by the plurality of certificate authorities;
• and
• causing, based at least in part on the identification, the operation to be performed by the second private certificate authority by at least providing, over a second communication channel comprising a distinct protocol from the first communication channel, the second private certificate authority with the second request through an endpoint of the certificate management service within an environment.

A non-transitory computer-readable storage medium storing thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:

• provide, to a client computer system, an interface for creating a private certificate authority and performing an operation to one or more digital certificates;
• obtain a request in response to the interface to create a first private certificate authority over a first communication channel within a first network provided by a computing resource service provider;
• provision, at least in part by a certificate management service, a computer system to operate as the first private certificate authority in accordance with a parameter specified with the request within the first network;
• obtain, at the certificate management service, a request to perform an operation to a digital certificate of the one or more digital certificates, where the request includes an application programming interface (API) call directed to the certificate management service;
• identify, from a plurality of certificate authorities that includes a public certificate authority and a second private certificate authority, that the second private certificate authority issued the digital certificate and is:
• provisioned at least in part by the certificate management services;
• and
• accessible through the API provided by the certificate management service;
• and
• cause, based at least in part on the identification, the operation to be performed by at least providing the second private certificate authority with the request through a second communication channel of the certificate management service within an environment, the second communication channel comprising a distinct protocol from the first communication channel.