---
title: Charmhub | Deploy Self Signed X.509 Certificates using Charmhub - The Open
  Operator Collection
description: Deploy the latest version of Self Signed X.509 Certificates on any cloud.
url: https://charmhub.io/self-signed-certificates/docs/private-key-management
---

# Self Signed X.509 Certificates

[Canonical Telco](https://charmhub.io/publisher/telco-charmers "View all packages from Canonical Telco")

* [Canonical Telco](https://charmhub.io/publisher/telco-charmers "View all packages from Canonical Telco")

Platform:

24.04

22.04

1/stable 588

```
juju deploy self-signed-certificates --channel 1/stable
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

---

#### Relevant links

* [Homepage](https://charmhub.io/self-signed-certificates)

---

#### Contacts

* [Submit a bug](https://github.com/canonical/self-signed-certificates-operator/issues)

---

Share your thoughts on this charm with the community on discourse.

[Join the discussion](https://discourse.charmhub.io/)

# Private Key management

The Self Signed Certificates charm stores its private key in a [Juju secret](https://documentation.ubuntu.com/juju/latest/reference/secret/index.html), meaning users with access to the Juju model will be able to read the private key. You can read more about configuring your Juju secret backend [here](https://documentation.ubuntu.com/juju/latest/howto/manage-secret-backends/#manage-secret-backends).

The charm automatically rotates the private key on a schedule defined by the [root-ca-validity](https://charmhub.io/self-signed-certificates/configurations#root-ca-validity) Juju configuration option.

Users can manually trigger a private key rotation using the [rotate-private-key](https://charmhub.io/self-signed-certificates/actions#rotate-private-key) Juju action.

---