<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/pki-certificate-issuance-flexibility-with-vault-cieps-5ktcpchgg" -->

---
title: PKI certificate issuance flexibility with Vault CIEPS
description: HashiCorp Vault Enterprise 1.15 introduces Certificate Issuance External Policy Services (CIEPS) to address use cases where custom fields in X.509 PKI...
canonical: https://daily.dev/posts/pki-certificate-issuance-flexibility-with-vault-cieps-5ktcpchgg
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: PKI certificate issuance flexibility with Vault CIEPS | daily.dev
og:description: HashiCorp Vault Enterprise 1.15 introduces Certificate Issuance External Policy Services (CIEPS) to address use cases where custom fields in X.509 PKI...
og:url: https://daily.dev/posts/pki-certificate-issuance-flexibility-with-vault-cieps-5ktcpchgg
og:image: https://api.daily.dev/og/posts/5KTCPcHGg.png
og:image:alt: PKI certificate issuance flexibility with Vault CIEPS
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# PKI certificate issuance flexibility with Vault CIEPS

**[HashiCorp](https://daily.dev/sources/hc)** · 4 min read · 1 upvotes · 0 comments

## Summary

HashiCorp Vault Enterprise 1.15 introduces Certificate Issuance External Policy Services (CIEPS) to address use cases where custom fields in X.509 PKI certificates were not supported. With CIEPS, Vault can validate and issue certificates with any field specified in the x.509 standard. This provides organizations with granular control and flexibility in certificate structures while maintaining a consistent user experience.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.hashicorp.com/blog/pki-certificate-issuance-flexibility-with-vault-cieps>

---

Tags: [#hashicorp](https://daily.dev/tags/hashicorp), [#pki](https://daily.dev/tags/pki)

[View this post on daily.dev](https://daily.dev/posts/pki-certificate-issuance-flexibility-with-vault-cieps-5ktcpchgg)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"PKI certificate issuance flexibility with Vault CIEPS","url":"https://daily.dev/posts/pki-certificate-issuance-flexibility-with-vault-cieps-5ktcpchgg","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/pki-certificate-issuance-flexibility-with-vault-cieps-5ktcpchgg"},"datePublished":"2023-12-13T18:40:57.051Z","dateModified":"2026-03-30T02:16:37.490Z","description":"HashiCorp Vault Enterprise 1.15 introduces Certificate Issuance External Policy Services (CIEPS) to address use cases where custom fields in X.509 PKI...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0012b769c97157625f7ca6c97c0fe366?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0012b769c97157625f7ca6c97c0fe366?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"HashiCorp","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"HashiCorp","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/1c6a95b748824b3ca66a9a7c320737e5","url":"https://daily.dev/sources/hc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/pki-certificate-issuance-flexibility-with-vault-cieps-5ktcpchgg","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"hashicorp,pki","timeRequired":"PT4M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"HashiCorp","item":"https://daily.dev/sources/hc"},{"@type":"ListItem","position":3,"name":"PKI certificate issuance flexibility with Vault CIEPS"}]}
```

