POST /api/v1/pki/certificates/issue-certificate

PKI Certificates

Issue certificate

post/api/v1/pki/certificates/issue-certificate

Request body

caIdstring

The ID of the CA to issue the certificate from.

certificateTemplateIdstring

The ID of the certificate template to issue the certificate from.

pkiCollectionIdstring

The ID of the PKI collection to add the certificate to.

friendlyNamestring

A friendly name for the certificate.

commonNamestring required

The common name (CN) for the certificate.

altNamesstring

A comma-delimited list of Subject Alternative Names (SANs) for the certificate; these can be host names or email addresses.

ttlstring required

The time to live for the certificate such as 1m, 1h, 1d, 1y, ...

notBeforestring

The date and time when the certificate becomes valid in YYYY-MM-DDTHH:mm:ss.sssZ format.

notAfterstring

The date and time when the certificate expires in YYYY-MM-DDTHH:mm:ss.sssZ format.

keyUsagesstring[]

The key usage extension of the certificate.

extendedKeyUsagesstring[]

The extended key usage extension of the certificate.

Default Response

certificatestring required

The issued certificate.

issuingCaCertificatestring required

The certificate of the issuing CA.

certificateChainstring required

The certificate chain of the issued certificate.

privateKeystring required

The private key of the issued certificate.

serialNumberstring required

The serial number of the issued certificate.

Changed in 1 of the 23 revisions of this API.1

Jul 31, 2026edde28ab3c8c1See the full diff
- ○
  added the new anyExtendedKeyUsage enum value to the request property /
  request-property-enum-value-added