---
title: "Renew active certificate"
method: POST
path: "/v1/certificates/{certificateId}/renew"
tags: ["v1"]
---

# Renew active certificate

`POST /v1/certificates/{certificateId}/renew`

## Request

- Base URL: `https://api.ote-godaddy.com`
- URL: `https://api.ote-godaddy.com/v1/certificates/{certificateId}/renew`
- Auth: none declared

Renewal is the process by which the validity of a certificate is extended. Renewal is only available 60 days prior to expiration of the previous certificate and 30 days after the expiration of the previous certificate. The renewal supports modifying a set of the original certificate order information. Once a request is validated and approved, the certificate will be issued with extended validity. Since subject alternative names can be removed during a renewal, we require that you provide the subject alternative names you expect in the renewed certificate. New names added to a certificate that do not share the base domain of the common name may take additional time to validate. </p>

## Path parameters

- `certificateId` string, required

## Request body

- CertificateRenew
  - `callbackUrl` string: Required if client would like to receive stateful actions via callback during certificate lifecyle
  - `commonName` string: The common name of certificate to be secured
  - `csr` string: Certificate Signing Request.
  - `period` integer: Number of years for certificate validity period, if different from previous certificate
  - `rootType` 'GODADDY_SHA_1' | 'GODADDY_SHA_2' | 'STARFIELD_SHA_1' | 'STARFIELD_SHA_2': Root Type. Depending on certificate expiration date, SHA_1 not be allowed. Will default to SHA_2 if expiration date exceeds sha1 allowed date
  - `subjectAlternativeNames` string[]: Only used for UCC products. An array of subject alternative names to include in certificate. Not including a subject alternative name that was in the previous certificate will remove it from the renewed certificate.

## Response `202`

Renew request created

## Other responses

- `400`: Request was malformed
- `401`: Authentication info not sent or invalid
- `403`: Authenticated user is not allowed access
- `404`: Certificate id not found
- `409`: Certificate state does not allow renew
- `422`: `csr` is invalid
- `500`: Internal server error

---

[API](https://skmtc.dev/godaddy/apis/godaddy-certificates-api.md) - [All operations](https://skmtc.dev/godaddy/apis/godaddy-certificates-api/llms.txt) - [OpenAPI document](https://skmtc.dev/godaddy/apis/godaddy-certificates-api/revisions/100b3aa2d7ee?raw)