X.509 Identities

X.509 certificates include a public key and an identity (the public key + identifying information), and are used to bind an identity to a public key with a digital signature.

Signatures can be made by a public and trusted certificate authority or they can be self-signed.

Each X.509 certificate contains information about the identity that issued the certificate and the one to which the certificate is issued, such as:

  • Subject — The distinguished name of the recipient of the certificate.

  • Sign algorithm — The signature algorithm the issuer uses to sign the certificate.

  • Alternative names — Alternative names of the recipient of the certificate.

  • Valid from — The start date and time the certificate is valid and can be trusted.

  • Valid to — The end date and time the certificate is valid and can be trusted.

  • Subject public key information — The public key associated with the identity.

  • Version — X.509 version that applies to the certificate.

X509 Identities screen

The X509 Identities screen allows you to manually install identities in a Medallia Experience Cloud instance. This screen lists all identities available for that particular company instance. They are sorted by creation date. Use the search bar at the top of the list to search for a particular identity.

Click an identity to reveal information about it:

  • Name

  • Description

  • Certificate bundle (private key + certificate chain) — The private key and full certificate chain in PEM format.

  • Certificate Info

Screen capture showing X509 Identities screen with information about the selected identity

Installing identities in the instance

To install an identity, complete the following steps:

  1. From X509 Identities screen, click New.

  2. Enter a name and a description.

  3. Enter the RSA private keys and public certificates in the Certificate bundle text box.

    Screen capture showing X509 Identities screen with RSA private key info in the certificate bundle text box

  4. Click Save.

    Medallia Experience Cloud verifies that the keys and certificates are valid, and shows the certificate info.

    Screen capture showing X509 Identities screen with certificate info

For existing identities, you can change the key that is being used by clicking Change key and entering a new one.

These identities are displayed in the Use client-side certificate drop-down list in Omni Exporter SSL/TLS Options or the JWT Signing Key drop-down list.