PKI Signers

Switch the signer to the certificate already issued in an existing DigiCert order, signing with that certificate's private key on the HSM. DigiCert does not reissue or revoke anything.

post/api/v1/cert-manager/signers/{signerId}/certificate/import

Request

  • Base URL
    https://us.infisical.com
  • URL
    https://us.infisical.com/api/v1/cert-manager/signers/{signerId}/certificate/import
  • Auth
    none declared

Path parameters

signerIdstring uuid required

Request body

caIdstring uuid required

The DigiCert certificate authority the order belongs to.

externalOrderIdstring required

The DigiCert order whose certificate the signer will use.

certificateRenewBeforeDaysinteger nullable

Days before expiry to renew the certificate with the same HSM key. Must be less than the certificate's validity. Omit to keep the signer's current setting, or set to null to turn renewal off.

Response

Default Response

idstring uuid required
namestring required
descriptionstring nullable
statusstring
certificateIdstring uuid nullable
approvalPolicyIdstring uuid nullable
lastSignedAtstring date-time nullable
createdAtstring date-time required
updatedAtstring date-time required
caIdstring uuid nullable
commonNamestring nullable
certificateTtlDaysnumber nullable
certificateRenewBeforeDaysnumber nullable
certificateFailureReasonstring nullable
keyAlgorithmstring
externalCaConfigunknown

Changes