---
title: "POST /api/v1/pki/subscribers/{subscriberName}/sign-certificate"
method: POST
path: "/api/v1/pki/subscribers/{subscriberName}/sign-certificate"
tags: ["PKI Subscribers"]
deprecated: true
---

# POST /api/v1/pki/subscribers/{subscriberName}/sign-certificate

`POST /api/v1/pki/subscribers/{subscriberName}/sign-certificate`

## Request

- Base URL: `https://us.infisical.com`
- URL: `https://us.infisical.com/api/v1/pki/subscribers/{subscriberName}/sign-certificate`
- Auth: none declared

> **Deprecated.**

Sign certificate. Deprecated, use certificate applications instead: https://infisical.com/docs/documentation/platform/pki/applications/overview

## Path parameters

- `subscriberName` string, required

## Request body

- object
  - `projectId` string, required: The ID of the project of the PKI subscriber to sign the certificate for.
  - `csr` string, required: The CSR to be used to sign the certificate.

## Response `200`

Default Response

- object
  - `certificate` string, required: The signed certificate.
  - `issuingCaCertificate` string, required: The certificate of the issuing CA.
  - `certificateChain` string, required: The certificate chain of the signed certificate.
  - `serialNumber` string, required: The serial number of the issued certificate.

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `422`: Default Response
- `500`: Default Response

## Changes

- **2026-09-26** `eb8ec9c10063`: 1 info
  - endpoint deprecated

[Operation history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/pki/subscribers/:subscriberName/sign-certificate/post.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) - [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/7f940199c899?raw)