---
title: "Import certificate"
method: POST
path: "/api/certificates/import"
tags: ["Certificates"]
---

# Import certificate

`POST /api/certificates/import`

Imports an externally-issued certificate together with its private key, and optionally its CA chain

## Response `201`

Certificate imported successfully

- CertificateDTO — Data Transfer Object for a certificate. Represents a certificate with its metadata, public key, and expiry information.
  - `id` string, required — The unique identifier of the entity.
  - `createdBy` UserInfo, required — Represents the user who performed an action, with a computed display name.
    - `id` string, required — The unique identifier of the user.
    - `friendlyName` string, required — A human-readable display name for the user. "OIAnalytics" for the oianalytics system user, "Admin" for the admin login, or "Firstname Lastname (login)" for regular users.
  - `updatedBy` UserInfo, required — Represents the user who performed an action, with a computed display name.
    - `id` string, required — The unique identifier of the user.
    - `friendlyName` string, required — A human-readable display name for the user. "OIAnalytics" for the oianalytics system user, "Admin" for the admin login, or "Firstname Lastname (login)" for regular users.
  - `createdAt` string, required — Represents an instant in time as an ISO 8601 string.
  - `updatedAt` string, required — Represents an instant in time as an ISO 8601 string.
  - `name` string, required — The name of the certificate.
  - `description` string, required — A description of the certificate's purpose or usage.
  - `publicKey` string, required — The public key of the certificate in PEM format.
  - `certificate` string, required — The certificate in PEM format.
  - `expiry` string, required — Represents an instant in time as an ISO 8601 string.
  - `certificateChain` string, nullable, required — The PEM bundle of intermediate/root CA certificates supplied when importing an externally-issued certificate. Null for self-signed certificates generated by OIBus.

## Changes

- **2026-08-24** `c7fdedb4e501` — 1 info
  - endpoint added
- **2026-08-18** `87fa588c6b1b` — 1 breaking
  - api path removed without deprecation
- **2026-08-10** `a5458a493e76` — 1 info
  - endpoint added
- **2026-07-28** `9a6250881fa7` — 1 breaking
  - api path removed without deprecation
- **2026-07-28** `6c9a9144ca23` — 1 info
  - endpoint added

[Full history](https://skmtc.dev/optimistiksas/apis/oibus-api/changes/api/certificates/import/post.md)

---

[API](https://skmtc.dev/optimistiksas/apis/oibus-api.md) · [All operations](https://skmtc.dev/optimistiksas/apis/oibus-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/optimistiksas/oibus-api/revisions/512c91ccaed6/schema)