PKI Certificates

Changed on

Sign certificate

post/api/v1/pki/certificates/sign-certificate

Request

  • Base URL
    https://us.infisical.com
  • URL
    https://us.infisical.com/api/v1/pki/certificates/sign-certificate
  • Auth
    none declared

Request body

caIdstring

The ID of the CA to issue the certificate from.

certificateTemplateIdstring

The ID of the certificate template to issue the certificate from.

pkiCollectionIdstring

The ID of the PKI collection to add the certificate to.

csrstring required

The pem-encoded CSR to sign with the CA to be used for certificate issuance.

friendlyNamestring

A friendly name for the certificate.

commonNamestring

The common name (CN) for the certificate.

altNamesstring

A comma-delimited list of Subject Alternative Names (SANs) for the certificate; these can be host names or email addresses.

ttlstring required

The time to live for the certificate such as 1m, 1h, 1d, 1y, ...

notBeforestring

The date and time when the certificate becomes valid in YYYY-MM-DDTHH:mm:ss.sssZ format.

notAfterstring

The date and time when the certificate expires in YYYY-MM-DDTHH:mm:ss.sssZ format.

keyUsagesstring[]

The key usage extension of the certificate.

extendedKeyUsagesstring[]

The extended key usage extension of the certificate.

Response

Default Response

certificatestring required

The issued certificate.

issuingCaCertificatestring required

The certificate of the issuing CA.

certificateChainstring required

The certificate chain of the issued certificate.

serialNumberstring required

The serial number of the issued certificate.

Changes