---
title: "Allows the current identity to validate reciept of a new client certificate"
method: POST
path: "/current-identity/authenticators/{id}/extend-verify"
tags: ["Current API Session", "Enroll", "Extend Enrollment"]
---

# Allows the current identity to validate reciept of a new client certificate

`POST /current-identity/authenticators/{id}/extend-verify`

## Request

- Base URL: `https://demo.ziti.dev/edge/client/v1`
- URL: `https://demo.ziti.dev/edge/client/v1/current-identity/authenticators/{id}/extend-verify`
- Auth: one of:
  - API key in header `zt-session`
  - OAuth 2
    - Authorization code: `/oidc/authorize`
    - Token URL: `/oidc/token` scopes: `openid`
- TypeScript: <https://skmtc.dev/openziti/apis/ziti-edge-client/docs/current-identity/authenticators/:id/extend-verify/post.ts> (a function with typed inputs; its response is checked against the schema)

After submitting a CSR for a new client certificate the resulting public certificate must be re-submitted to this endpoint to verify receipt.
After receipt, the new client certificate must be used for new authentication requests.

## Path parameters

- `id` string, required

## Request body

- IdentityExtendValidateEnrollmentRequest
  - `clientCert` string, required: A PEM encoded client certificate previously returned after an extension request

## Response `200`

Base empty response

- Empty
  - `data` object, required
  - `meta` Meta, required
    - `apiEnrollmentVersion` string
    - `apiVersion` string
    - `filterableFields` string[]
    - `pagination` Pagination
      - `limit` number, required
      - `offset` number, required
      - `totalCount` number, required

## Other responses

- `401`: The supplied session does not have the correct access rights to request this resource

## Changes

- **2024-05-29** `cce2800c1357`: 2 warning
  - the optional response header `WWW-Authenticate` removed for the status `200`
  - the optional response header `WWW-Authenticate` removed for the status `401`

[Operation history](https://skmtc.dev/openziti/apis/ziti-edge-client/changes/current-identity/authenticators/:id/extend-verify/post.md)

---

[API](https://skmtc.dev/openziti/apis/ziti-edge-client.md) - [All operations](https://skmtc.dev/openziti/apis/ziti-edge-client/llms.txt) - [OpenAPI document](https://skmtc.dev/openziti/apis/ziti-edge-client/revisions/f7b51eaafbbb?raw)