---
title: certificationAuthority
description: Object class for augmenting entries that act as certificate authorities, as described in X.521 clause 6.17.
component: pingds
version: 8.1
page_id: pingds:schemaref:oc-certificationAuthority
canonical_url: https://docs.pingidentity.com/pingds/8.1/schemaref/oc-certificationAuthority.html
---

# certificationAuthority

Object class for augmenting entries that act as certificate authorities, as described in X.521 clause 6.17.

This object class is deprecated. Use `pkiCA` instead.

|                       |                                                                                                                                                                                                        |
| --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| *OID*                 | 2.5.6.16                                                                                                                                                                                               |
| *Names*               | certificationAuthority                                                                                                                                                                                 |
| *Superior classes*    | [top](oc-top.html)                                                                                                                                                                                     |
| *Class type*          | AUXILIARY: for use in augmenting attributes of entries that already have a structural object class.                                                                                                    |
| *Required attributes* | [authorityRevocationList](at-authorityRevocationList.html), [cACertificate](at-cACertificate.html), [certificateRevocationList](at-certificateRevocationList.html), [objectClass](at-objectClass.html) |
| *Optional attributes* | [crossCertificatePair](at-crossCertificatePair.html)                                                                                                                                                   |
| *Origin*              | [RFC 4523](https://datatracker.ietf.org/doc/html/rfc4523)                                                                                                                                              |
| *Schema file*         | 00-core.ldif                                                                                                                                                                                           |