Partners Group PKI Service

Introduction

The following endpoints are part of the Partners Group PKI Service.

Practices

Identification and Authentication
For auto enrolled certificates, the subject in the certificate must be unique. For certificates issued using self-service procedure, the subject in the certificate may not be unique.

Certificate Life-Cycle
Issuance upon request, revocation within 24 hours in case of compromise.

Security Controls
Key generation with at least 2048-bit RSA as protection of private keys.

Legal Policy

Liability
Subscribers and relying parties shall have no claim against Partners Group arising from use of the subscriber’s certificate or a Partners Group determination to terminate a certificate. In no event will Partners Group be liable for any losses, including direct or indirect, incidental, consequential, special, or punitive damages, arising out of or relating to any certificate issued or revoked by these PKI/CAs.

Financial Responsibility
No financial responsibility is accepted.

Fees
No fees are charged for any service provided by Partners Group PKI Service.

Repository

Name Format URL Valid until Thumbprint
Partners Group Root CA CRT http://cdp.partnersgroup.com/pg-prod-infra-pki_root-01.crt 09.06.2045 c433c3997ab2f9633dd8d0ea7c2670bc125b4187
Partners Group Issuing CA 1 CRT http://cdp.partnersgroup.com/pg-prod-infra-pki_subca1-01.crt 09.06.2035 81a1c546b62ac6e63bbf84564763d9fe8204d180
Partners Group Issuing CA 1 CRL CRL http://crl.partnersgroup.com/crl/1b6af817-8692-43d8-8cc6-60484862cb94.crl updates daily
Partners Group Issuing CA 2 CRT http://cdp.partnersgroup.com/pg-prod-infra-pki_subca2-01.crt 09.06.2035 fdef1f10faac5b0304fcf319bb34900474675bd8
Partners Group Issuing CA 2 CRL CRL http://crl.partnersgroup.com/crl/eb106292-81c7-4e0d-8068-84f8d8d9d090.crl updates daily
Online Certificate Status Protocol OCSP http://ocsp.partnersgroup.com updates immediately