Patent ID: 11888997
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 4:
5. A computer-implemented method, comprising:
obtaining, at a certificate management service of a computing resource service provider and from an interface for creating a private certificate authority and performing an operation to one or more certificates, a first request to create a first private certificate authority over a first communication channel within a first network provided by the computing resource service provider and associated with an account of the computing resource service provider;
provisioning, by the certificate management service, within the first network, a computer system to operate as the first private certificate authority in accordance with a parameter specified with the first request;
obtaining, through an application programming interface at the certificate management service, a second request to perform an operation to a digital certificate of the one or more digital certificates;
identifying, by the certificate management service, from a plurality of certificate authorities that includes a public certificate authority and a second private certificate authority, that the second private certificate authority issued the digital certificate and is:
provisioned at least in part by the certificate management service; and
accessible, through the application programming interface, by the plurality of certificate authorities; and

causing, based at least in part on the identification, the operation to be performed by the second private certificate authority by at least providing, over a second communication channel comprising a distinct protocol from the first communication channel, the second private certificate authority with the second request through an endpoint of the certificate management service within an environment.