[{"data":1,"prerenderedAt":170},["ShallowReactive",2],{"navigation_docs":3,"landing":86},[4,22,31,48,65],{"title":5,"path":6,"stem":7,"children":8,"page":21},"Api","\u002Fdocs\u002Fapi","docs\u002Fapi",[9,13,17],{"title":10,"path":11,"stem":12},"CLI Reference","\u002Fdocs\u002Fapi\u002Fcli-reference","docs\u002Fapi\u002F1.cli-reference",{"title":14,"path":15,"stem":16},"ZMQ Protocol Reference","\u002Fdocs\u002Fapi\u002Fzmq-protocol","docs\u002Fapi\u002F2.zmq-protocol",{"title":18,"path":19,"stem":20},"Error Codes","\u002Fdocs\u002Fapi\u002Ferror-codes","docs\u002Fapi\u002F3.error-codes",false,{"title":23,"path":24,"stem":25,"children":26,"page":21},"Community","\u002Fdocs\u002Fcommunity","docs\u002Fcommunity",[27],{"title":28,"path":29,"stem":30},"Contributing","\u002Fdocs\u002Fcommunity\u002Fcontributing","docs\u002Fcommunity\u002F1.contributing",{"title":32,"path":33,"stem":34,"children":35,"page":21},"Concepts","\u002Fdocs\u002Fconcepts","docs\u002Fconcepts",[36,40,44],{"title":37,"path":38,"stem":39},"Architecture","\u002Fdocs\u002Fconcepts\u002Farchitecture","docs\u002Fconcepts\u002F1.architecture",{"title":41,"path":42,"stem":43},"Certificate Lifecycle","\u002Fdocs\u002Fconcepts\u002Fcertificate-lifecycle","docs\u002Fconcepts\u002F2.certificate-lifecycle",{"title":45,"path":46,"stem":47},"Security Model","\u002Fdocs\u002Fconcepts\u002Fsecurity-model","docs\u002Fconcepts\u002F3.security-model",{"title":49,"path":50,"stem":51,"children":52,"page":21},"Getting Started","\u002Fdocs\u002Fgetting-started","docs\u002Fgetting-started",[53,57,61],{"title":54,"path":55,"stem":56},"Introduction","\u002Fdocs\u002Fgetting-started\u002Fintroduction","docs\u002Fgetting-started\u002F1.introduction",{"title":58,"path":59,"stem":60},"Installation","\u002Fdocs\u002Fgetting-started\u002Finstallation","docs\u002Fgetting-started\u002F2.installation",{"title":62,"path":63,"stem":64},"Quick Start","\u002Fdocs\u002Fgetting-started\u002Fquick-start","docs\u002Fgetting-started\u002F3.quick-start",{"title":66,"path":67,"stem":68,"children":69,"page":21},"Guides","\u002Fdocs\u002Fguides","docs\u002Fguides",[70,74,78,82],{"title":71,"path":72,"stem":73},"Configuration","\u002Fdocs\u002Fguides\u002Fconfiguration","docs\u002Fguides\u002F1.configuration",{"title":75,"path":76,"stem":77},"Certificate Profiles","\u002Fdocs\u002Fguides\u002Fcertificate-profiles","docs\u002Fguides\u002F2.certificate-profiles",{"title":79,"path":80,"stem":81},"Docker Deployment","\u002Fdocs\u002Fguides\u002Fdocker-deployment","docs\u002Fguides\u002F3.docker-deployment",{"title":83,"path":84,"stem":85},"Importing an Existing CA","\u002Fdocs\u002Fguides\u002Fimporting-existing-ca","docs\u002Fguides\u002F4.importing-existing-ca",{"id":87,"title":88,"body":89,"description":163,"extension":164,"meta":165,"navigation":21,"path":166,"seo":167,"stem":168,"__hash__":169},"landing\u002Findex.md","uPKI CA",{"type":90,"value":91,"toc":158},"minimark",[92,97,106,119,124],[93,94,96],"h1",{"id":95},"your-internal-pki-zero-internet-required","Your internal PKI, zero internet required.",[98,99,100,101,105],"p",{},"uPKI CA is a self-hosted Certificate Authority that gives you ",[102,103,104],"strong",{},"complete control"," over your internal TLS infrastructure. Issue, renew, and revoke X.509 certificates via ZMQ — no cloud, no third party, no dependency.",[98,107,108,112,113],{},[109,110,111],"a",{"href":55},"Get Started"," · ",[109,114,118],{"href":115,"rel":116},"https:\u002F\u002Fgithub.com\u002Fcircle-rd\u002Fupki-ca",[117],"nofollow","GitHub",[120,121,123],"h2",{"id":122},"why-upki-ca","Why uPKI CA?",[125,126,127,133,138,143,148,153],"card-group",{},[128,129,132],"card",{"icon":130,"title":131},"i-lucide-shield","Air-gapped by design","Runs fully offline. No internet access required — ideal for secure, regulated, or isolated environments.",[128,134,137],{"icon":135,"title":136},"i-lucide-zap","ZMQ protocol","Fast, binary-safe JSON-over-ZMQ protocol. One port for CA operations, one for RA registration.",[128,139,142],{"icon":140,"title":141},"i-lucide-layers","7 built-in profiles","Ready-made profiles for root CA, intermediate CA, server, client, OCSP, email, and code signing.",[128,144,147],{"icon":145,"title":146},"i-lucide-database","Flexible storage","File-based by default (TinyDB + filesystem). MongoDB adapter available for larger deployments.",[128,149,152],{"icon":150,"title":151},"i-lucide-refresh-cw","Full lifecycle","Generate, sign, renew, revoke, unrevoke, and delete certificates with a clean ZMQ API.",[128,154,157],{"icon":155,"title":156},"i-lucide-puzzle","uPKI ecosystem","Works seamlessly with uPKI RA (ACME v2) and uPKI CLI for a complete private PKI stack.",{"title":159,"searchDepth":160,"depth":160,"links":161},"",2,[162],{"id":122,"depth":160,"text":123},"uPKI CA is a self-hosted Certificate Authority that gives you complete control over your internal TLS infrastructure. Issue, renew, and revoke X.509 certificates via ZMQ — no cloud, no third party, no dependency.","md",{},"\u002F",{"title":88,"description":163},"index","i7dlRi4wy0j8HSDxhy1njav6YLJ31fBOXJQcL5Fw4kY",1775569477073]