Sign in
PKI Certificates

Renew a certificate. The renewed certificate copies the one being renewed, then applies only the changes supplied here. Profile defaults are not applied.

post/api/v1/cert-manager/certificates/{id}/renew

Path parameters

idstring uuid required

The ID of the certificate to renew.

Request body

renewalKeySource'new' | 'reuse' | 'csr'

How the renewed certificate's key pair is handled. 'new' generates a fresh pair, 'reuse' keeps the current one so the renewed certificate carries the same public key, and 'csr' takes the key from a supplied signing request. Defaults to 'new'.

csrstring

A PEM-encoded certificate signing request to renew from. Its subject, key and extensions take precedence, so only TTL and basic constraints may be set alongside it.

Response

Default Response

certificatestring required
issuingCaCertificatestring required
certificateChainstring required
privateKeystring
serialNumberstring required
certificateIdstring required
certificateRequestIdstring required

Changes

Changed in 1 of the 22 revisions of this API.4

  • d87fa2e5de584See the full diff
    • ○

      added the new optional request property /

      new-optional-request-property

    • ○

      added the new optional request property /

      new-optional-request-property

    • ○

      added the new optional request property /

      new-optional-request-property

    • ○

      the request property became nullable

      request-property-became-nullable