CodeSign Secure Documentation
  • Overview
    • About CodeSign Secure
    • Getting Started
    • Documentation Guide
    • Portal Overview
    • Troubleshooting
      • FAQ
    • Glossary
  • Reference Guide
    • Header Bar
      • CodeSign Secure Documentation
      • Swagger API
      • Profile Section
    • Dashboard
      • Key Performance Indicators
      • Issued Certificates
      • Signatures Generated
      • HSM Health Check
    • Keys and Certificates
      • Key and Certificate Lifecycle
    • App Management
    • Signing Requests
      • Approval Workflows
    • Signing Tools
    • Reports
      • Signing Request Report
      • Audit Trail
      • Certificate Report
      • Client Report
    • Logs
    • System Setup
      • Identity Store
      • Backup
      • User
      • Roles and Permissions
      • Email
      • Signing Projects
      • SSL/TLS Management
      • Environment
      • Plugins
  • Setup & Architecture
    • Identity and Access Control
    • Architecture and Concepts
    • Installation
      • Windows
        • Installing the Server
        • Ports and Protocols
        • High Availability and Backup
        • Upgrades and Compatibility
    • Security
      • Security Hardening Checklist
      • Client Authentication
      • Designing Signing Policies
  • Release Notes
    • Releases for 2026
      • v3.2.1
    • Releases for 2025
      • v3.2.0
    • Releases for 2024
      • v3.1.0
  • API Reference
    • Getting Started
    • Authorizing Requests
    • Securing API Access
    • Request and Response Conventions
    • Endpoint Reference
      • Signing
      • Signing Requests
      • Certificates
      • Applications and Environments
      • User Management
      • Permissions
      • Email
      • System Setup
      • Reports
      • Dashboard
      • License
  • Integration Guides
    • Signing Capabilities
      • Supported Formats and Platforms
      • Timestamping
      • Windows Signing - SignTool
        • Signing
        • Macro Signing
      • Apple Signing
      • AppX & MSIX Signing
      • Visual Studio ClickOnce
      • Jar Signing
      • Sign HLK/HCK using CodeSign Secure
      • NuGet Signing
      • Mage Signing
      • Sign OVA/OVF using Encryption Consulting’s Utility Tool
      • Utility Tool for code signing
      • Container Signing
      • PKCS11 Wrapper
        • APK Signing
        • OpenSSL Signing
        • XML Signing
        • JSign Tool Signing
        • Jarsigner Signing
        • GPG2, Debian & RPM Signing
      • Reproducible Build
        • Automated Hash Validation
        • Reproducible Build Process Flow
        • Pipeline Script Components
        • Hash Validation
    • CI/CD Integration
      • GitHub Actions
      • Jenkins
      • GitLab
      • Azure DevOps
      • TeamCity
      • Bamboo
      • Securing CI/CD Credentials

Certificates

The Certificates endpoints list, create, and update signing certificates and certificate signing requests, and change a certificate’s status and key usage.

For the corresponding user interface, refer to the Keys and Certificates section.

Endpoints

MethodEndpointDescription
GET/certificate_manage/activecerts/List active certificates
GET/certificate_manage/certificateDetailsByName/{certificateName}/Get a certificate by name
POST/certificate_manage/certificateDetailsByName/{certificateName}/Create a certificate record by name
GET/certificate_manage/certificate_namesList certificate names
POST/certificate_manage/certificate_status/active/Activate a certificate
POST/certificate_manage/certificate_status/inactive/Deactivate a certificate
GET/certificate_manage/certificatesList certificates
POST/certificate_manage/certificatesAdd a certificate record
GET/certificate_manage/certificates/{id}/Get a certificate
PUT/certificate_manage/certificates/{id}/Replace a certificate record
PATCH/certificate_manage/certificates/{id}/Update a certificate record
GET/certificate_manage/certificatesTriggers/List certificate expiry reminders
POST/certificate_manage/certificatesTriggers/Create a certificate expiry reminder
GET/certificate_manage/certificatesTriggers/{id}/Get a certificate expiry reminder
PUT/certificate_manage/certificatesTriggers/{id}/Replace a certificate expiry reminder
PATCH/certificate_manage/certificatesTriggers/{id}/Update a certificate expiry reminder
GET/certificate_manage/downloadCSR/Download a certificate signing request
POST/certificate_manage/download_multiple_certificates/Download several certificates
GET/certificate_manage/downloadcertificate/Download a certificate
PUT/certificate_manage/edit_environment/{certificate_id}/Change a certificate's environment
GET/certificate_manage/get_certificate_data/List supported algorithms
GET/certificate_manage/importCertificate/List imported certificates
POST/certificate_manage/importCertificate/Import a certificate
GET/certificate_manage/importCertificate/{id}/Get an imported certificate
PUT/certificate_manage/importCertificate/{id}/Replace an imported certificate record
PATCH/certificate_manage/importCertificate/{id}/Update an imported certificate record
GET/certificate_manage/mappedProjects/{certificate_id}/List applications a certificate is mapped to
POST/certificate_manage/mappedProjects/{certificate_id}/Map a certificate to an application
GET/certificate_manage/selfSignCertificate/List self-signed certificates
POST/certificate_manage/selfSignCertificate/Create a self-signed certificate
GET/certificate_manage/selfSignCertificate/{id}/Get a self-signed certificate
PUT/certificate_manage/selfSignCertificate/{id}/Replace a self-signed certificate record
PATCH/certificate_manage/selfSignCertificate/{id}/Update a self-signed certificate record
GET/certificate_manage/signRequest/List certificate signing requests
POST/certificate_manage/signRequest/Generate a certificate signing request
GET/certificate_manage/signRequest/{id}/Get a certificate signing request
PUT/certificate_manage/signRequest/{id}/Replace a signing request record
PATCH/certificate_manage/signRequest/{id}/Update a signing request record
PUT/certificate_manage/update_key_usageSet certificate key usage
GET /certificate_manage/activecerts/

Returns the certificates currently available for signing.

Request Parameters

NameLocated InTypeRequiredDescription
keyQuerystringNoNarrow the result to one key.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/activecerts/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
GET /certificate_manage/certificateDetailsByName/{certificateName}/

Returns the details of one certificate, looked up by name rather than identifier.

Request Parameters

NameLocated InTypeRequiredDescription
certificateNamePathstringYesName of the certificate.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/certificateDetailsByName/<certificateName>/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
POST /certificate_manage/certificateDetailsByName/{certificateName}/

Creates a certificate record against the supplied name.

Request Parameters

NameLocated InTypeRequiredDescription
certificateNamePathstringYesName of the certificate.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringNoCertificate description
common_namestringNoCommon name
organization_namestringNoOrganization name
organization_unitstringNoOrganization unit
country_codestringNoCountry code
state_provincestringNoState province
localitystringNoLocality
emailstring (email)NoEmail
key_algorithmstringNoKey algorithm
valid_fromstring (date-time)NoValid from
valid_tostring (date-time)NoValid to
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
FileNamestringNoFileName
key_aliasstringNoKey alias
Is_deletedbooleanNoIs deleted
key_usagestringNoKey usage

Example Request

curl -X POST "https://<your domain>/api/certificate_manage/certificateDetailsByName/<certificateName>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","created_user":1}'

Responses

Status CodeDescription
201The operation completed.
GET /certificate_manage/certificate_names

Returns the names of the available certificates, for populating a picker.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/certificate_names" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
POST /certificate_manage/certificate_status/active/

Marks a certificate as available for signing.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesName of the certificate

Example Request

curl -X POST "https://<your domain>/api/certificate_manage/certificate_status/active/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string"}'

Responses

Status CodeDescription
200The operation completed.
POST /certificate_manage/certificate_status/inactive/

Marks a certificate as unavailable for signing. Existing signatures are unaffected.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesName of the certificate

Example Request

curl -X POST "https://<your domain>/api/certificate_manage/certificate_status/inactive/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string"}'

Responses

Status CodeDescription
200The operation completed.
GET /certificate_manage/certificates

Returns every certificate held on the appliance, with its type, validity dates and current state. Expired certificates are reported as inactive.

Request Parameters

NameLocated InTypeRequiredDescription
algorithmQuerystringNoLimit to one key algorithm, for example RSA or ECDSA.
sizeQuerystringNoLimit to one key size in bits, for example 2048 or 256.
statusQuerystringNoLimit to one state: active, inactive or expired.
filtersQuerystringNoJSON array of {"field": .., "operator": .., "value": ..} objects, all of which must match. Fields: Certificate_Name, Algorithm, Size, Valid_Till, Environment, Status. Text fields take equals, not_equals, contains, not_contains, starts_with or ends_with; date fields take date_is, date_is_not, date_is_before or date_is_after with a YYYY-MM-DD value. Unknown fields and operators are ignored. Status takes only equals, with Active, Inactive or Expired.
pageQueryintegerNo1-based page number. Defaults to 1.
countQueryintegerNoRecords per page. Defaults to 10.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/certificates" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
POST /certificate_manage/certificates

Creates a certificate record. The fields and their types are listed under Parameters.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringNoCertificate description
common_namestringNoCommon name
organization_namestringNoOrganization name
organization_unitstringNoOrganization unit
certifcateTypeintegerYesCertifcateType
country_codestringNoCountry code
state_provincestringNoState province
localitystringNoLocality
emailstring (email)NoEmail
key_algorithmstringNoKey algorithm
valid_fromstring (date-time)NoValid from
valid_tostring (date-time)NoValid to
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
key_aliasstringNoKey alias
Is_deletedbooleanNoIs deleted
key_usagestringNoKey usage
eidstringNoEid

Example Request

curl -X POST "https://<your domain>/api/certificate_manage/certificates" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certifcateType":1,"created_user":1}'

Responses

Status CodeDescription
201The operation completed.
GET /certificate_manage/certificates/{id}/

Returns a single certificate by identifier.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/certificates/<id>/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
PUT /certificate_manage/certificates/{id}/

Replaces a certificate record. Send the full set of fields.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringNoCertificate description
common_namestringNoCommon name
organization_namestringNoOrganization name
organization_unitstringNoOrganization unit
certifcateTypeintegerYesCertifcateType
country_codestringNoCountry code
state_provincestringNoState province
localitystringNoLocality
emailstring (email)NoEmail
key_algorithmstringNoKey algorithm
valid_fromstring (date-time)NoValid from
valid_tostring (date-time)NoValid to
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
key_aliasstringNoKey alias
Is_deletedbooleanNoIs deleted
key_usagestringNoKey usage
eidstringNoEid

Example Request

curl -X PUT "https://<your domain>/api/certificate_manage/certificates/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certifcateType":1,"created_user":1}'

Responses

Status CodeDescription
200The record after the update.
PATCH /certificate_manage/certificates/{id}/

Updates selected fields of a certificate record. Send only the fields to change.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringNoCertificate description
common_namestringNoCommon name
organization_namestringNoOrganization name
organization_unitstringNoOrganization unit
certifcateTypeintegerYesCertifcateType
country_codestringNoCountry code
state_provincestringNoState province
localitystringNoLocality
emailstring (email)NoEmail
key_algorithmstringNoKey algorithm
valid_fromstring (date-time)NoValid from
valid_tostring (date-time)NoValid to
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
key_aliasstringNoKey alias
Is_deletedbooleanNoIs deleted
key_usagestringNoKey usage
eidstringNoEid

Example Request

curl -X PATCH "https://<your domain>/api/certificate_manage/certificates/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certifcateType":1,"created_user":1}'

Responses

Status CodeDescription
200The record after the update.
GET /certificate_manage/certificatesTriggers/

Returns the configured expiry reminders: how many days before expiry a notice is sent, and who receives it.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/certificatesTriggers/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
POST /certificate_manage/certificatesTriggers/

Configures an expiry reminder. Fields are listed under Parameters.

Request Body (application/json)

FieldTypeRequiredDescription
triggerEmailsarray of objectYes
triggerDaysarray of objectYes

Example Request

curl -X POST "https://<your domain>/api/certificate_manage/certificatesTriggers/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"triggerEmails":[],"triggerDays":[]}'

Responses

Status CodeDescription
201The operation completed.
GET /certificate_manage/certificatesTriggers/{id}/

Returns one expiry reminder by identifier.

Request Parameters

NameLocated InTypeRequiredDescription
idPathstringYes

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/certificatesTriggers/<id>/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
PUT /certificate_manage/certificatesTriggers/{id}/

Replaces the reminder. Send the full set of fields.

Request Parameters

NameLocated InTypeRequiredDescription
idPathstringYes

Request Body (application/json)

FieldTypeRequiredDescription
triggerEmailsarray of objectYes
triggerDaysarray of objectYes

Example Request

curl -X PUT "https://<your domain>/api/certificate_manage/certificatesTriggers/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"triggerEmails":[],"triggerDays":[]}'

Responses

Status CodeDescription
200The record after the update.
PATCH /certificate_manage/certificatesTriggers/{id}/

Updates selected fields. Send only the fields to change.

Request Parameters

NameLocated InTypeRequiredDescription
idPathstringYes

Request Body (application/json)

FieldTypeRequiredDescription
triggerEmailsarray of objectYes
triggerDaysarray of objectYes

Example Request

curl -X PATCH "https://<your domain>/api/certificate_manage/certificatesTriggers/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"triggerEmails":[],"triggerDays":[]}'

Responses

Status CodeDescription
200The record after the update.
GET /certificate_manage/downloadCSR/

Returns a generated certificate signing request as a file.

Request Parameters

NameLocated InTypeRequiredDescription
csrNameQuerystringYesName of the signing request.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/downloadCSR/?csrName=<csrName>" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
POST /certificate_manage/download_multiple_certificates/

Returns the named certificates together as a zip archive.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_names_listarray of stringYesNames of the certificates to include.

Example Request

curl -X POST "https://<your domain>/api/certificate_manage/download_multiple_certificates/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_names_list":[]}'

Responses

Status CodeDescription
200The operation completed.
GET /certificate_manage/downloadcertificate/

Returns a single certificate file.

Request Parameters

NameLocated InTypeRequiredDescription
certificateNameQuerystringYesName of the certificate.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/downloadcertificate/?certificateName=<certificateName>" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
PUT /certificate_manage/edit_environment/{certificate_id}/

Moves a certificate to a different environment.

Request Parameters

NameLocated InTypeRequiredDescription
certificate_idPathintegerYesIdentifier of the certificate.

Request Body (application/json)

FieldTypeRequiredDescription
environment_idintegerYesEnvironment to move the certificate to.
environment_namestringYesName of the target environment.
modified_user_idintegerYesUser making the change.

Example Request

curl -X PUT "https://<your domain>/api/certificate_manage/edit_environment/<certificate_id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"environment_id":1,"environment_name":"string","modified_user_id":1}'

Responses

Status CodeDescription
200The record after the update.
GET /certificate_manage/get_certificate_data/

Returns the key algorithms and sizes available when creating a certificate, for populating a picker.

Request Parameters

NameLocated InTypeRequiredDescription
typeQuerystringNoLimit to one certificate type.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/get_certificate_data/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
GET /certificate_manage/importCertificate/

Returns the certificates imported into the appliance.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/importCertificate/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
POST /certificate_manage/importCertificate/

Imports a certificate issued elsewhere and associates it with a key held in the hardware security module. Fields are listed under Parameters.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringYesCertificate description
passwordstringNoPassword
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
Is_deletedbooleanNoIs deleted
valid_tostring (date-time)NoValid to
key_usagestringNoKey usage
key_aliasstringNoKey alias
eidstringNoEid
environment_idintegerYesEnvironment id

Example Request

curl -X POST "https://<your domain>/api/certificate_manage/importCertificate/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certificate_description":"string","created_user":1,"environment_id":1}'

Responses

Status CodeDescription
201The operation completed.
GET /certificate_manage/importCertificate/{id}/

Returns one imported certificate by identifier.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/importCertificate/<id>/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
PUT /certificate_manage/importCertificate/{id}/

Replaces the record. Send the full set of fields.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringYesCertificate description
passwordstringNoPassword
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
Is_deletedbooleanNoIs deleted
valid_tostring (date-time)NoValid to
key_usagestringNoKey usage
key_aliasstringNoKey alias
eidstringNoEid
environment_idintegerYesEnvironment id

Example Request

curl -X PUT "https://<your domain>/api/certificate_manage/importCertificate/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certificate_description":"string","created_user":1,"environment_id":1}'

Responses

Status CodeDescription
200The record after the update.
PATCH /certificate_manage/importCertificate/{id}/

Updates selected fields. Send only the fields to change.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringYesCertificate description
passwordstringNoPassword
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
Is_deletedbooleanNoIs deleted
valid_tostring (date-time)NoValid to
key_usagestringNoKey usage
key_aliasstringNoKey alias
eidstringNoEid
environment_idintegerYesEnvironment id

Example Request

curl -X PATCH "https://<your domain>/api/certificate_manage/importCertificate/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certificate_description":"string","created_user":1,"environment_id":1}'

Responses

Status CodeDescription
200The record after the update.
GET /certificate_manage/mappedProjects/{certificate_id}/

Returns the applications and environments the certificate may be used with.

Request Parameters

NameLocated InTypeRequiredDescription
certificate_idPathintegerYesIdentifier of the certificate.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/mappedProjects/<certificate_id>/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
POST /certificate_manage/mappedProjects/{certificate_id}/

Associates the certificate with an application and environment.

Request Parameters

NameLocated InTypeRequiredDescription
certificate_idPathintegerYesIdentifier of the certificate.

Request Body (application/json)

FieldTypeRequiredDescription
project_idintegerYesProject id

Example Request

curl -X POST "https://<your domain>/api/certificate_manage/mappedProjects/<certificate_id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"project_id":1}'

Responses

Status CodeDescription
201The operation completed.
GET /certificate_manage/selfSignCertificate/

Returns the certificates created as self-signed on this appliance.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/selfSignCertificate/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
POST /certificate_manage/selfSignCertificate/

Generates a key pair inside the hardware security module and issues a self-signed certificate for it. The private key is created in the module and cannot be exported. Subject and key fields are listed under Parameters.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringYesCertificate description
common_namestringYesCommon name
organization_namestringYesOrganization name
organization_unitstringYesOrganization unit
country_codestringYesCountry code
state_provincestringYesState province
localitystringYesLocality
emailstring (email)YesEmail
key_algorithmstringYesKey algorithm
valid_fromstring (date-time)YesValid from
valid_tostring (date-time)YesValid to
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
Is_deletedbooleanNoIs deleted
key_usagestringNoKey usage
key_renewalbooleanNoKey renewal
environment_idintegerYesEnvironment id

Example Request

curl -X POST "https://<your domain>/api/certificate_manage/selfSignCertificate/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certificate_description":"string","common_name":"string","organization_name":"string","organization_unit":"string","country_code":"string","state_province":"string","locality":"string","email":"string","key_algorithm":"string","valid_from":"string","valid_to":"string","created_user":1,"environment_id":1}'

Responses

Status CodeDescription
201The operation completed.
GET /certificate_manage/selfSignCertificate/{id}/

Returns one self-signed certificate by identifier.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/selfSignCertificate/<id>/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
PUT /certificate_manage/selfSignCertificate/{id}/

Replaces the record. Send the full set of fields.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringYesCertificate description
common_namestringYesCommon name
organization_namestringYesOrganization name
organization_unitstringYesOrganization unit
country_codestringYesCountry code
state_provincestringYesState province
localitystringYesLocality
emailstring (email)YesEmail
key_algorithmstringYesKey algorithm
valid_fromstring (date-time)YesValid from
valid_tostring (date-time)YesValid to
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
Is_deletedbooleanNoIs deleted
key_usagestringNoKey usage
key_renewalbooleanNoKey renewal
environment_idintegerYesEnvironment id

Example Request

curl -X PUT "https://<your domain>/api/certificate_manage/selfSignCertificate/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certificate_description":"string","common_name":"string","organization_name":"string","organization_unit":"string","country_code":"string","state_province":"string","locality":"string","email":"string","key_algorithm":"string","valid_from":"string","valid_to":"string","created_user":1,"environment_id":1}'

Responses

Status CodeDescription
200The record after the update.
PATCH /certificate_manage/selfSignCertificate/{id}/

Updates selected fields. Send only the fields to change.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringYesCertificate description
common_namestringYesCommon name
organization_namestringYesOrganization name
organization_unitstringYesOrganization unit
country_codestringYesCountry code
state_provincestringYesState province
localitystringYesLocality
emailstring (email)YesEmail
key_algorithmstringYesKey algorithm
valid_fromstring (date-time)YesValid from
valid_tostring (date-time)YesValid to
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
Is_deletedbooleanNoIs deleted
key_usagestringNoKey usage
key_renewalbooleanNoKey renewal
environment_idintegerYesEnvironment id

Example Request

curl -X PATCH "https://<your domain>/api/certificate_manage/selfSignCertificate/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certificate_description":"string","common_name":"string","organization_name":"string","organization_unit":"string","country_code":"string","state_province":"string","locality":"string","email":"string","key_algorithm":"string","valid_from":"string","valid_to":"string","created_user":1,"environment_id":1}'

Responses

Status CodeDescription
200The record after the update.
GET /certificate_manage/signRequest/

Returns the certificate signing requests generated on this appliance.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/signRequest/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
POST /certificate_manage/signRequest/

Generates a key pair inside the hardware security module and produces a certificate signing request for submission to a certificate authority. Subject and key fields are listed under Parameters.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringYesCertificate description
common_namestringYesCommon name
organization_namestringYesOrganization name
organization_unitstringYesOrganization unit
country_codestringYesCountry code
state_provincestringYesState province
localitystringYesLocality
emailstring (email)YesEmail
key_algorithmstringYesKey algorithm
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
Is_deletedbooleanNoIs deleted
key_usagestringNoKey usage
eidstringNoEid

Example Request

curl -X POST "https://<your domain>/api/certificate_manage/signRequest/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certificate_description":"string","common_name":"string","organization_name":"string","organization_unit":"string","country_code":"string","state_province":"string","locality":"string","email":"string","key_algorithm":"string","created_user":1}'

Responses

Status CodeDescription
201The operation completed.
GET /certificate_manage/signRequest/{id}/

Returns one certificate signing request by identifier.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Example Request

curl -X GET "https://<your domain>/api/certificate_manage/signRequest/<id>/" \
  -H "Authorization: Bearer <token>"

Responses

Status CodeDescription
200The requested records.
PUT /certificate_manage/signRequest/{id}/

Replaces the record. Send the full set of fields.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringYesCertificate description
common_namestringYesCommon name
organization_namestringYesOrganization name
organization_unitstringYesOrganization unit
country_codestringYesCountry code
state_provincestringYesState province
localitystringYesLocality
emailstring (email)YesEmail
key_algorithmstringYesKey algorithm
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
Is_deletedbooleanNoIs deleted
key_usagestringNoKey usage
eidstringNoEid

Example Request

curl -X PUT "https://<your domain>/api/certificate_manage/signRequest/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certificate_description":"string","common_name":"string","organization_name":"string","organization_unit":"string","country_code":"string","state_province":"string","locality":"string","email":"string","key_algorithm":"string","created_user":1}'

Responses

Status CodeDescription
200The record after the update.
PATCH /certificate_manage/signRequest/{id}/

Updates selected fields. Send only the fields to change.

Request Parameters

NameLocated InTypeRequiredDescription
idPathintegerYesA unique integer value identifying this all_ certificates_ table.

Request Body (application/json)

FieldTypeRequiredDescription
certificate_namestringYesCertificate name
certificate_descriptionstringYesCertificate description
common_namestringYesCommon name
organization_namestringYesOrganization name
organization_unitstringYesOrganization unit
country_codestringYesCountry code
state_provincestringYesState province
localitystringYesLocality
emailstring (email)YesEmail
key_algorithmstringYesKey algorithm
isArchivebooleanNoIsArchive
isActivatebooleanNoIsActivate
created_userintegerYesCreated user
created_datestring (date-time)NoCreated date
modified_byintegerNoModified by
Is_deletedbooleanNoIs deleted
key_usagestringNoKey usage
eidstringNoEid

Example Request

curl -X PATCH "https://<your domain>/api/certificate_manage/signRequest/<id>/" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"certificate_name":"string","certificate_description":"string","common_name":"string","organization_name":"string","organization_unit":"string","country_code":"string","state_province":"string","locality":"string","email":"string","key_algorithm":"string","created_user":1}'

Responses

Status CodeDescription
200The record after the update.
PUT /certificate_manage/update_key_usage

Records what a certificate may be used for.

Request Body (application/json)

FieldTypeRequiredDescription
idintegerYesIdentifier of the certificate.
key_usagestringYesKey usage to apply.

Example Request

curl -X PUT "https://<your domain>/api/certificate_manage/update_key_usage" \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"id":1,"key_usage":"string"}'

Responses

Status CodeDescription
200The record after the update.
On this Page:
Support Privacy Policy Terms of Service

Copyright Encryption Consulting LLC. All rights reserved.