---
title: "Extend multi-signature authorization"
method: POST
path: "/csc/v1/credentials/extendTransaction"
tags: ["CSC (v1)"]
---

# Extend multi-signature authorization

`POST /csc/v1/credentials/extendTransaction`

## Request

- Base URL: `https://one.digicert.com/documentmanager`
- URL: `https://one.digicert.com/documentmanager/csc/v1/credentials/extendTransaction`
- Auth: one of:
  - API key in header `X-API-Key`
  - OAuth 2
    - Client credentials
    - Token URL: `/imauth/oauth2/token` scopes: `service`
  - OAuth 2
    - Authorization code: `/imauth/oauth2/authorize`
    - Token URL: `/imauth/oauth2/token` scopes: `service`
- TypeScript: <https://skmtc.dev/digicert/apis/digicert-content-trust-manager/docs/csc/v1/credentials/extendTransaction/post.ts> (a function with typed inputs; its response is checked against the schema)

Use this endpoint to obtain a new SAD (Signature Activation Data), which extends the validity of a given multi-signature authorization.
It can also be used to renew a SAD, before it expires, when signature operations take longer than allowed by the expiresIn value. Expired SAD cannot be extended

The following parameters are required in the request body:

`SAD` — Signature Activation Data.

`hash` — Transaction hash string value.

`credentialID` — Credential ID associated with the authorization.

## Request body

- ExtendTransactionRequest
  - `hash` string[], required: Arbitrary data from the Signature Application. It can be used to handle a transaction identifier or other application-specific data.
  - `clientData` string: Order
  - `credentialID` string, required: The identifier associated to the credential.
  - `SAD` string, required: The current Signature Activation Data. This token is returned by the credentials/authorize or by the previous credentials/extendTransaction methods.

## Response `200`

Multi-signature transaction details

- AuthorizeCredentialsResponse
  - `expiresIn` string: The lifetime in seconds of the service access token. If omitted, the default expiration time is 3600 (1 hour).
  - `SAD` string: The Signature Activation Data to provide as input to the signatures/signHash method.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `500`: Internal Server Error

---

[API](https://skmtc.dev/digicert/apis/digicert-content-trust-manager.md) - [All operations](https://skmtc.dev/digicert/apis/digicert-content-trust-manager/llms.txt) - [OpenAPI document](https://skmtc.dev/digicert/apis/digicert-content-trust-manager/revisions/8dec322a0e2b?raw)