Abstract: A certificate management system and method allows a requester, such as a subscriber using a software application, to customize certificates by selecting variable certificate content specification data. A certificate issuing unit, such as a certification authority issues a variable content based certificate in response to the requester based variable certificate content specification data, after the variable certificate content specification data has been compared with issuance criteria data to ensure that the requested certificate customization parameters do not conflict with security system constraints, such as security limits. The issuance criteria data is configurable by a security officer or other user through the certificate issuing unit. If desired, each differing software application (i.e., requester) may have its own customized certificates allowing greater flexibility for the security system and for the requesters.