TLS Certificate template
Last updated: 4 Jul 2026
Official optional IT pack—structured fields for tls certificate secrets.
What this template is
The TLS Certificate template stores tLS / mTLS certificates with PEM storage and expiry metadata. Enable it under Settings → Category templates → Infrastructure & IT.
| Category slug | tls-certificate |
| Pack | Official optional — nt2-template-tls-certificate |
| Tier | Free |
When to use it (and when not to)
Good fits
- Wildcard or service certificates with renewal dates
- Full PEM chain in multiline masked fields
- Expiry reminders via structured expiry date (enable in Settings when available)
Use something else instead
| Situation | Better template |
|---|---|
| API token for a SaaS | API Service |
| VPN profile | VPN |
| Unstructured PEM paste | Secure Note |
Everyday workflows
- Store certificate (PEM) and optional chain in dedicated multiline secret fields.
- Set expiry date for local reminder hooks.
- Keep private key in the same item only when you manage the full cert lifecycle.
Fields at a glance
| Field | What to put here | Sensitive? |
|---|---|---|
| Title | Title | No |
| Hostname | Hostname | No |
| Issuer | Issuer | No |
| Expiry date | Expiry date | No |
| Certificate (PEM) | Certificate (PEM) | Yes |
| Certificate chain (PEM) | Certificate chain (PEM) | Yes |
| Private key | Private key | Yes |
| Notes | Notes | No |
What you need
| Tier | Free |
| Vault state | Unlocked |
| Network | Offline after the first successful app load |
| Feature toggle | TLS Certificate pack enabled—see Enable category template packs |
Steps
- Unlock your vault and open Settings → General → Category templates.
- Under Infrastructure & IT, toggle TLS Certificate On.
- Open Assets and Add asset → TLS Certificate.
- Fill required fields and Save.
Tips and common mistakes
- Enable pack first—TLS Certificate is not a core builtin.
- Do not paste secrets into Secure Note—you lose masking, validation, and share hard-blocks.
- Clipboard auto-clear applies to copied secrets—paste within 30 seconds.