PKI Certificates

Changed on

Renew a certificate. The renewed certificate copies the one being renewed, then applies only the changes supplied here. Profile defaults are not applied.

post/api/v1/cert-manager/certificates/{id}/renew

Request

  • Base URL
    https://us.infisical.com
  • URL
    https://us.infisical.com/api/v1/cert-manager/certificates/{id}/renew
  • Auth
    none declared

Path parameters

idstring uuid required

The ID of the certificate to renew.

Request body

renewalKeySource'new' | 'reuse' | 'csr'

How the renewed certificate's key pair is handled. 'new' generates a fresh pair, 'reuse' keeps the current one so the renewed certificate carries the same public key, and 'csr' takes the key from a supplied signing request. Defaults to 'new'.

csrstring

A PEM-encoded certificate signing request to renew from. Its subject, key and extensions take precedence, so only TTL and basic constraints may be set alongside it.

Response

Default Response

certificatestring required
issuingCaCertificatestring required
certificateChainstring required
privateKeystring
serialNumberstring required
certificateIdstring required
certificateRequestIdstring required

Changes

  • 838c6b7e6bb8Revision changes
    • info

      added the new optional request property //

    • info

      added the new smart_card_logon enum value to the request property ///

  • d87fa2e5de58Revision changes
    • info

      added the new optional request property /

    • info

      added the new optional request property /

    • info

      added the new optional request property /

    • info

      the request property became nullable