xcsh — Configuration

Supply a leaf-first public chain and matching private key. Native certificate preparation validates the pair and encrypts the normalized key. Use Input variants for protected PEM, PKCS#12, and raw offline encryption.

Public JSON

{
  "metadata": { "name": "<XCSH_CERT_NAME>", "namespace": "<XCSH_NAMESPACE>" },
  "spec": {
    "certificate_url": "string:///<BASE64_PUBLIC_CHAIN>",
    "private_key": { "blindfold_secret_info": { "location": "string:///<ENCRYPTED_KEY>" } }
  }
}

This complete certificate configuration shows the resulting public fields. Preparation replaces the encoded-material placeholders; never apply placeholder ciphertext.

Download public certificate JSON.