Client Operations API (2.18.0)

Download OpenAPI specification:Download

ILM: info@otilm.com URL: https://www.otilm.com License: MIT License

REST API for Client Operations

Client Operations v2

Client Operations v2 API

Issue certificate

Submit a new certificate signing request and trigger issuance through this RA profile. If the issuance is asynchronous, the certificate is returned in state PENDING_ISSUE and must be finalized once it has been issued.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID

Request Body schema: application/json
required

	Array of objects (RequestAttribute) List of attributes to create CSR. Required if CSR is not provided
	Array of objects (RequestAttribute) List of attributes to sign the CSR
	Array of objects (RequestAttribute) List of attributes to sign the alternative private key
request required	string Certificate signing request encoded as Base64 string
format	string (CertificateRequestFormat) Default: "pkcs10" Enum: "pkcs10" "crmf" Certificate signing request format
tokenProfileUuid	string <uuid> Token Profile UUID. Required if CSR is not uploaded
keyUuid	string <uuid> Key UUID. Required if CSR is not uploaded
altTokenProfileUuid	string <uuid> Token Profile UUID for the alternative key.
altKeyUuid	string <uuid> Alternative Key UUID.
required	Array of objects (RequestAttribute) List of RA Profile related Attributes to issue Certificate
	Array of objects (RequestAttribute) List of Custom Attributes

Responses

Request samples

Payload

Content type

application/json

{"csrAttributes": [{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
],
"signatureAttributes": [{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
],
"altSignatureAttributes": [{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
],
"request": "string",
"format": "pkcs10",
"tokenProfileUuid": "66f2e24c-4f07-496b-b5c4-6fe8a5e8361a",
"keyUuid": "a0e39a6c-fae3-43d6-99c3-a3620775a368",
"altTokenProfileUuid": "487a31a3-090d-4b19-9b24-0ff6d52ff0e9",
"altKeyUuid": "ae57c41d-5798-439d-bc96-b05c70b20ac1",
"attributes": [{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
],
"customAttributes": [{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
]
}

Response samples

Content type

application/json

{"certificateData": "string",
"uuid": "string"
}

Revoke certificate

Revoke a certificate currently in state ISSUED. If the revocation is asynchronous, the certificate moves to state PENDING_REVOKE and must be confirmed once the revocation has been performed.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID
certificateUuid required	string Certificate UUID

Request Body schema: application/json
required

reason	string (CertificateRevocationReason) Default: "UNSPECIFIED" Enum: "unspecified" "keyCompromise" "cACompromise" "affiliationChanged" "superseded" "cessationOfOperation" "certificateHold" "privilegeWithdrawn" "aACompromise" Reason for revocation
required	Array of objects (RequestAttribute) List of Attributes to revoke Certificate
destroyKey	boolean Default: false Destroy Key upon successful revocation

Responses

Request samples

Payload

Content type

application/json

{"reason": "unspecified",
"attributes": [{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
],
"destroyKey": false
}

Response samples

400
403
404
502
503

Content type

application/json

{"message": "Error message"
}

Confirm an asynchronous certificate revocation

Confirm that a revoked certificate has been revoked. The certificate must be in state PENDING_REVOKE. The platform applies the destroy-key flag and revoke attributes from the original revoke request, transitions the certificate to REVOKED, and clears the data carried over from the original request.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID
certificateUuid required	string Certificate UUID

Responses

Response samples

422

Content type

*/*

[
  "Certificate is not in PENDING_REVOKE state"
]

Renew certificate

Renew an existing certificate using the same key pair. The original certificate stays in state ISSUED; the renewed certificate is returned and, if its issuance is asynchronous, ends in state PENDING_ISSUE until it is finalized.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID
certificateUuid required	string Certificate UUID

Request Body schema: application/json
required

replaceInLocations	boolean Default: false True to replace renewed certificate in the associated locations
request	string Certificate signing request encoded as Base64 string. If not provided, Existing CSR will be used
format	string (CertificateRequestFormat) Default: "pkcs10" Enum: "pkcs10" "crmf" Certificate signing request format

Responses

Request samples

Payload

Content type

application/json

{"replaceInLocations": false,
"request": "string",
"format": "pkcs10"
}

Response samples

Content type

application/json

{"certificateData": "string",
"uuid": "string"
}

Rekey Certificate

The rekey operation is used to request a new certificate with a new key pair. The new certificate will be issued with the same subject and attributes as the original certificate, but with a new public key. Therefore, new certificate signing request (CSR) with new key pair needs to be provided, or new key pair managed by the platform needs to be selected. When the same key pair is used, or the subject is changed, the rekey operation will be rejected.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID
certificateUuid required	string Certificate UUID

Request Body schema: application/json
required

replaceInLocations	boolean Default: false True to replace renewed certificate in the associated locations
request	string Certificate signing request encoded as Base64 string. If not provided, CSR attributes will be used
format	string (CertificateRequestFormat) Default: "pkcs10" Enum: "pkcs10" "crmf" Certificate signing request format
keyUuid	string <uuid> Key UUID
tokenProfileUuid	string <uuid> Token Profile UUID
altKeyUuid	string <uuid> Alternative Key UUID
altTokenProfileUuid	string <uuid> Token Profile UUID for the alternative key
	Array of objects (RequestAttribute) Signature Attributes. If not provided, existing attributes will be used to generate the new CSR
	Array of objects (RequestAttribute) Alternative Signature Attributes. If not provided, existing alternative attributes will be used to generate the new CSR

Responses

Request samples

Payload

Content type

application/json

{"replaceInLocations": false,
"request": "string",
"format": "pkcs10",
"keyUuid": "a0e39a6c-fae3-43d6-99c3-a3620775a368",
"tokenProfileUuid": "66f2e24c-4f07-496b-b5c4-6fe8a5e8361a",
"altKeyUuid": "ae57c41d-5798-439d-bc96-b05c70b20ac1",
"altTokenProfileUuid": "487a31a3-090d-4b19-9b24-0ff6d52ff0e9",
"signatureAttributes": [{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
],
"altSignatureAttributes": [{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
]
}

Response samples

Content type

application/json

{"certificateData": "string",
"uuid": "string"
}

Issue an existing certificate request

Trigger issuance for a certificate already in state REQUESTED. Used after the certificate request has been created (typically via a protocol such as ACME, SCEP, or CMP) and any approval and compliance flows have completed.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID
certificateUuid required	string Certificate UUID

Responses

Response samples

Content type

application/json

{"certificateData": "string",
"uuid": "string"
}

Finalize an asynchronous certificate issuance

Upload an issued certificate to finalize a certificate currently in state PENDING_ISSUE. On success, the certificate transitions to ISSUED and is pushed to any pre-associated locations.

Validation:

the certificate request's public key must match the uploaded certificate's public key (mandatory);
the certificate request's subject DN should match the uploaded certificate's subject DN (warning on mismatch — some CAs canonicalise the DN);
the uploaded certificate must be verifiable against the certificate authority associated with the RA profile (mandatory).

Request body carries a Base64-encoded single certificate and an optional list of certificate-level custom attributes.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID
certificateUuid required	string Certificate UUID

Request Body schema: application/json
required

certificate required	string Base64 Content of the Certificate
required	Array of objects (RequestAttribute) Custom Attributes for the Certificate

Responses

Request samples

Payload

Content type

application/json

{"certificate": "string",
"customAttributes": [{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
]
}

Response samples

Content type

application/json

{"uuid": "string",
"commonName": "string",
"serialNumber": "string",
"issuerCommonName": "string",
"issuerDn": "string",
"subjectDn": "string",
"notBefore": "2019-08-24T14:15:22Z",
"notAfter": "2019-08-24T14:15:22Z",
"publicKeyAlgorithm": "string",
"altPublicKeyAlgorithm": "string",
"signatureAlgorithm": "string",
"altSignatureAlgorithm": "string",
"hybridCertificate": true,
"keySize": 0,
"altKeySize": 0,
"state": "requested",
"validationStatus": "not_checked",
"raProfile": {"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"enabled": true,
"authorityInstanceUuid": "string"
},
"fingerprint": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"owner": "string",
"ownerUuid": "string",
"certificateType": "X.509",
"issuerSerialNumber": "string",
"complianceStatus": "not_checked",
"issuerCertificateUuid": "string",
"privateKeyAvailability": true,
"trustedCa": true,
"archived": false,
"extendedKeyUsage": ["string"
],
"keyUsage": ["digitalSignature"
],
"subjectType": "endEntity",
"metadata": [{"connectorUuid": "string",
"connectorName": "string",
"sourceObjectType": "NONE",
"items": [{"sourceObjects": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name"
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
]
}
],
"certificateContent": "string",
"subjectAlternativeNames": {"property1": ["string"
],
"property2": ["string"
]
},
"locations": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"entityInstanceUuid": "string",
"entityInstanceName": "string",
"attributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"enabled": true,
"supportMultipleEntries": false,
"supportKeyManagement": false,
"certificates": [{"certificateUuid": "string",
"state": "requested",
"validationStatus": "not_checked",
"commonName": "string",
"serialNumber": "string",
"metadata": [{"connectorUuid": "string",
"connectorName": "string",
"sourceObjectType": "NONE",
"items": [{"sourceObjects": [null
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"content": [null
],
"version": "v2"
}
]
}
],
"pushAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"csrAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"withKey": false
}
],
"metadata": [{"connectorUuid": "string",
"connectorName": "string",
"sourceObjectType": "NONE",
"items": [{"sourceObjects": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name"
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
]
}
]
}
],
"nonCompliantRules": [{"connectorName": "Provider1",
"ruleName": "RuleName",
"ruleDescription": "Description sample",
"status": "ok",
"attributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"key": {"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"creationTime": "2019-08-24T14:15:22Z",
"tokenProfileUuid": "string",
"tokenProfileName": "string",
"tokenInstanceUuid": "string",
"tokenInstanceName": "string",
"owner": "string",
"ownerUuid": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"items": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"creationTime": "2019-08-24T14:15:22Z",
"keyWrapperUuid": "string",
"tokenProfileUuid": "string",
"tokenProfileName": "string",
"tokenInstanceUuid": "string",
"tokenInstanceName": "string",
"owner": "string",
"ownerUuid": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": null,
"data": null
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"associations": 0,
"keyReferenceUuid": "string",
"type": "Secret",
"keyAlgorithm": "RSA",
"format": "Raw",
"length": 0,
"usage": ["sign"
],
"enabled": true,
"state": "pre-active",
"complianceStatus": "not_checked"
}
],
"associations": 0,
"complianceStatus": "not_checked"
},
"altKey": {"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"creationTime": "2019-08-24T14:15:22Z",
"tokenProfileUuid": "string",
"tokenProfileName": "string",
"tokenInstanceUuid": "string",
"tokenInstanceName": "string",
"owner": "string",
"ownerUuid": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"items": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"creationTime": "2019-08-24T14:15:22Z",
"keyWrapperUuid": "string",
"tokenProfileUuid": "string",
"tokenProfileName": "string",
"tokenInstanceUuid": "string",
"tokenInstanceName": "string",
"owner": "string",
"ownerUuid": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": null,
"data": null
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"associations": 0,
"keyReferenceUuid": "string",
"type": "Secret",
"keyAlgorithm": "RSA",
"format": "Raw",
"length": 0,
"usage": ["sign"
],
"enabled": true,
"state": "pre-active",
"complianceStatus": "not_checked"
}
],
"associations": 0,
"complianceStatus": "not_checked"
},
"certificateRequest": {"uuid": "095be615-a8ad-4c33-8e9c-c7612fbf6c9f",
"certificateType": "X.509",
"certificateRequestFormat": "pkcs10",
"publicKeyAlgorithm": "string",
"signatureAlgorithm": "string",
"altSignatureAlgorithm": "string",
"content": "string",
"commonName": "string",
"subjectDn": "string",
"subjectAlternativeNames": {"property1": ["string"
],
"property2": ["string"
]
},
"attributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"signatureAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"altSignatureAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"keyUuid": "string",
"altKeyUuid": "string",
"complianceStatus": "not_checked"
},
"sourceCertificateUuid": "cef92ac9-d5a2-44b4-8d0a-6ae2f850acf7",
"issueAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"revokeAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"relatedCertificates": [{"uuid": "string",
"commonName": "string",
"serialNumber": "string",
"issuerCommonName": "string",
"issuerDn": "string",
"subjectDn": "string",
"notBefore": "2019-08-24T14:15:22Z",
"notAfter": "2019-08-24T14:15:22Z",
"publicKeyAlgorithm": "string",
"altPublicKeyAlgorithm": "string",
"signatureAlgorithm": "string",
"altSignatureAlgorithm": "string",
"hybridCertificate": true,
"keySize": 0,
"altKeySize": 0,
"state": "requested",
"validationStatus": "not_checked",
"raProfile": {"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"enabled": true,
"authorityInstanceUuid": "string"
},
"fingerprint": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"owner": "string",
"ownerUuid": "string",
"certificateType": "X.509",
"issuerSerialNumber": "string",
"complianceStatus": "not_checked",
"issuerCertificateUuid": "string",
"privateKeyAvailability": true,
"trustedCa": true,
"archived": false
}
],
"protocolInfo": {"protocol": "acme",
"protocolProfileUuid": "a286b9c7-97ed-44c6-a837-e8415ab11bf4",
"additionalProtocolUuid": "bcf08956-ad5e-4c4a-863d-293464f7e308"
},
"qcStatements": {"qcCompliance": true,
"qcSscd": true,
"qcType": ["esign"
],
"qcCcLegislation": ["string"
]
}
}

Cancel a pending certificate operation

State-aware cancel for a certificate currently in state PENDING_ISSUE or PENDING_REVOKE. Transitions:

PENDING_ISSUE → FAILED
PENDING_REVOKE → ISSUED

The optional reason from the request body is recorded in the certificate event history.

If the underlying operation cannot be aborted (for example, it has progressed beyond a point where cancellation is possible), the response is 422 Unprocessable Entity with the reason, and the certificate stays in its pending state. In that case the operation can still be resolved by waiting for it to complete and then finalizing or confirming the certificate, or by retrying the cancel later if circumstances change.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID
certificateUuid required	string Certificate UUID

Request Body schema: application/json

reason

string [ 0 .. 1000 ] characters

Optional free-text reason from the user explaining why the pending operation is being cancelled. Recorded in the certificate event history.

Responses

Request samples

Payload

Content type

application/json

{"reason": "string"
}

Response samples

Content type

application/json

{"uuid": "string",
"commonName": "string",
"serialNumber": "string",
"issuerCommonName": "string",
"issuerDn": "string",
"subjectDn": "string",
"notBefore": "2019-08-24T14:15:22Z",
"notAfter": "2019-08-24T14:15:22Z",
"publicKeyAlgorithm": "string",
"altPublicKeyAlgorithm": "string",
"signatureAlgorithm": "string",
"altSignatureAlgorithm": "string",
"hybridCertificate": true,
"keySize": 0,
"altKeySize": 0,
"state": "requested",
"validationStatus": "not_checked",
"raProfile": {"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"enabled": true,
"authorityInstanceUuid": "string"
},
"fingerprint": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"owner": "string",
"ownerUuid": "string",
"certificateType": "X.509",
"issuerSerialNumber": "string",
"complianceStatus": "not_checked",
"issuerCertificateUuid": "string",
"privateKeyAvailability": true,
"trustedCa": true,
"archived": false,
"extendedKeyUsage": ["string"
],
"keyUsage": ["digitalSignature"
],
"subjectType": "endEntity",
"metadata": [{"connectorUuid": "string",
"connectorName": "string",
"sourceObjectType": "NONE",
"items": [{"sourceObjects": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name"
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
]
}
],
"certificateContent": "string",
"subjectAlternativeNames": {"property1": ["string"
],
"property2": ["string"
]
},
"locations": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"entityInstanceUuid": "string",
"entityInstanceName": "string",
"attributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"enabled": true,
"supportMultipleEntries": false,
"supportKeyManagement": false,
"certificates": [{"certificateUuid": "string",
"state": "requested",
"validationStatus": "not_checked",
"commonName": "string",
"serialNumber": "string",
"metadata": [{"connectorUuid": "string",
"connectorName": "string",
"sourceObjectType": "NONE",
"items": [{"sourceObjects": [null
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"content": [null
],
"version": "v2"
}
]
}
],
"pushAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"csrAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"withKey": false
}
],
"metadata": [{"connectorUuid": "string",
"connectorName": "string",
"sourceObjectType": "NONE",
"items": [{"sourceObjects": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name"
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
]
}
]
}
],
"nonCompliantRules": [{"connectorName": "Provider1",
"ruleName": "RuleName",
"ruleDescription": "Description sample",
"status": "ok",
"attributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"key": {"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"creationTime": "2019-08-24T14:15:22Z",
"tokenProfileUuid": "string",
"tokenProfileName": "string",
"tokenInstanceUuid": "string",
"tokenInstanceName": "string",
"owner": "string",
"ownerUuid": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"items": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"creationTime": "2019-08-24T14:15:22Z",
"keyWrapperUuid": "string",
"tokenProfileUuid": "string",
"tokenProfileName": "string",
"tokenInstanceUuid": "string",
"tokenInstanceName": "string",
"owner": "string",
"ownerUuid": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": null,
"data": null
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"associations": 0,
"keyReferenceUuid": "string",
"type": "Secret",
"keyAlgorithm": "RSA",
"format": "Raw",
"length": 0,
"usage": ["sign"
],
"enabled": true,
"state": "pre-active",
"complianceStatus": "not_checked"
}
],
"associations": 0,
"complianceStatus": "not_checked"
},
"altKey": {"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"creationTime": "2019-08-24T14:15:22Z",
"tokenProfileUuid": "string",
"tokenProfileName": "string",
"tokenInstanceUuid": "string",
"tokenInstanceName": "string",
"owner": "string",
"ownerUuid": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"items": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"creationTime": "2019-08-24T14:15:22Z",
"keyWrapperUuid": "string",
"tokenProfileUuid": "string",
"tokenProfileName": "string",
"tokenInstanceUuid": "string",
"tokenInstanceName": "string",
"owner": "string",
"ownerUuid": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": null,
"data": null
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"associations": 0,
"keyReferenceUuid": "string",
"type": "Secret",
"keyAlgorithm": "RSA",
"format": "Raw",
"length": 0,
"usage": ["sign"
],
"enabled": true,
"state": "pre-active",
"complianceStatus": "not_checked"
}
],
"associations": 0,
"complianceStatus": "not_checked"
},
"certificateRequest": {"uuid": "095be615-a8ad-4c33-8e9c-c7612fbf6c9f",
"certificateType": "X.509",
"certificateRequestFormat": "pkcs10",
"publicKeyAlgorithm": "string",
"signatureAlgorithm": "string",
"altSignatureAlgorithm": "string",
"content": "string",
"commonName": "string",
"subjectDn": "string",
"subjectAlternativeNames": {"property1": ["string"
],
"property2": ["string"
]
},
"attributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"signatureAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"altSignatureAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"keyUuid": "string",
"altKeyUuid": "string",
"complianceStatus": "not_checked"
},
"sourceCertificateUuid": "cef92ac9-d5a2-44b4-8d0a-6ae2f850acf7",
"issueAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"revokeAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"relatedCertificates": [{"uuid": "string",
"commonName": "string",
"serialNumber": "string",
"issuerCommonName": "string",
"issuerDn": "string",
"subjectDn": "string",
"notBefore": "2019-08-24T14:15:22Z",
"notAfter": "2019-08-24T14:15:22Z",
"publicKeyAlgorithm": "string",
"altPublicKeyAlgorithm": "string",
"signatureAlgorithm": "string",
"altSignatureAlgorithm": "string",
"hybridCertificate": true,
"keySize": 0,
"altKeySize": 0,
"state": "requested",
"validationStatus": "not_checked",
"raProfile": {"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"enabled": true,
"authorityInstanceUuid": "string"
},
"fingerprint": "string",
"groups": [{"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"email": "string",
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
]
}
],
"owner": "string",
"ownerUuid": "string",
"certificateType": "X.509",
"issuerSerialNumber": "string",
"complianceStatus": "not_checked",
"issuerCertificateUuid": "string",
"privateKeyAvailability": true,
"trustedCa": true,
"archived": false
}
],
"protocolInfo": {"protocol": "acme",
"protocolProfileUuid": "a286b9c7-97ed-44c6-a837-e8415ab11bf4",
"additionalProtocolUuid": "bcf08956-ad5e-4c4a-863d-293464f7e308"
},
"qcStatements": {"qcCompliance": true,
"qcSscd": true,
"qcType": ["esign"
],
"qcCcLegislation": ["string"
]
}
}

Validate revocation attributes

Validate a candidate set of revocation attributes against this RA profile's schema before submitting a revocation request.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID

Request Body schema: application/json
required

Array

uuid required	string <uuid> UUID of the Attribute
name required	string Name of the Attribute
contentType required	string (AttributeContentType) Enum: "string" "text" "integer" "boolean" "float" "date" "time" "datetime" "secret" "file" "credential" "codeblock" "object" "resource" Content Type of the Attribute
	Array of BooleanAttributeContentV2 (object) or CodeBlockAttributeContentV2 (object) or CredentialAttributeContentV2 (object) or DateAttributeContentV2 (object) or DateTimeAttributeContentV2 (object) or FileAttributeContentV2 (object) or FloatAttributeContentV2 (object) or IntegerAttributeContentV2 (object) or ObjectAttributeContentV2 (object) or SecretAttributeContentV2 (object) or StringAttributeContentV2 (object) or TextAttributeContentV2 (object) or TimeAttributeContentV2 (object) (BaseAttributeContentDtoV2)
version required	string (AttributeVersion) Version of the Attribute v2

Responses

Request samples

Payload

Content type

application/json

[{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
]

Response samples

400
403
404
502
503

Content type

application/json

{"message": "Error message"
}

Validate issue certificate attributes

Validate a candidate set of issuance attributes against this RA profile's schema before submitting an issuance request. Returns 422 with a list of error messages when the attributes are not acceptable.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID

Request Body schema: application/json
required

Array

uuid required	string <uuid> UUID of the Attribute
name required	string Name of the Attribute
contentType required	string (AttributeContentType) Enum: "string" "text" "integer" "boolean" "float" "date" "time" "datetime" "secret" "file" "credential" "codeblock" "object" "resource" Content Type of the Attribute
	Array of BooleanAttributeContentV2 (object) or CodeBlockAttributeContentV2 (object) or CredentialAttributeContentV2 (object) or DateAttributeContentV2 (object) or DateTimeAttributeContentV2 (object) or FileAttributeContentV2 (object) or FloatAttributeContentV2 (object) or IntegerAttributeContentV2 (object) or ObjectAttributeContentV2 (object) or SecretAttributeContentV2 (object) or StringAttributeContentV2 (object) or TextAttributeContentV2 (object) or TimeAttributeContentV2 (object) (BaseAttributeContentDtoV2)
version required	string (AttributeVersion) Version of the Attribute v2

Responses

Request samples

Payload

Content type

application/json

[{"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"contentType": "string",
"content": [{"reference": "string",
"data": true,
"contentType": "string"
}
],
"version": "v2"
}
]

Response samples

Content type

application/json

{"message": "Error message"
}

Get revocation attributes

Return the list of attributes the client must populate when revoking a certificate through this RA profile.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID

Responses

Response samples

Content type

application/json

[{"name": "Attribute",
"type": "data",
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"description": "string",
"version": 0,
"content": [{"reference": "string",
"data": true
}
],
"contentType": "string",
"properties": {"label": "Attribute Name",
"visible": true,
"group": "requiredAttributes",
"required": false,
"readOnly": false,
"list": false,
"multiSelect": false,
"protectionLevel": "none",
"resource": "certificates",
"extensibleList": false
},
"constraints": [{"type": "regExp",
"errorMessage": "string",
"description": "string",
"data": "string"
}
],
"attributeCallback": {"callbackContext": "string",
"callbackMethod": "string",
"mappings": [{"from": "string",
"attributeType": "data",
"attributeContentType": "string",
"to": "string",
"targets": ["pathVariable"
],
"value": null
}
]
}
}
]

Get issue certificate attributes

Return the list of attributes the client must populate when requesting an issuance through this RA profile. The list reflects the certificate authority's current attribute schema.

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

authorityUuid required	string Authority Instance UUID
raProfileUuid required	string RA Profile UUID

Responses

Response samples

Content type

application/json

[{"name": "Attribute",
"type": "data",
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"description": "string",
"version": 0,
"content": [{"reference": "string",
"data": true
}
],
"contentType": "string",
"properties": {"label": "Attribute Name",
"visible": true,
"group": "requiredAttributes",
"required": false,
"readOnly": false,
"list": false,
"multiSelect": false,
"protectionLevel": "none",
"resource": "certificates",
"extensibleList": false
},
"constraints": [{"type": "regExp",
"errorMessage": "string",
"description": "string",
"data": "string"
}
],
"attributeCallback": {"callbackContext": "string",
"callbackMethod": "string",
"mappings": [{"from": "string",
"attributeType": "data",
"attributeContentType": "string",
"to": "string",
"targets": ["pathVariable"
],
"value": null
}
]
}
}
]

Legacy Client Operations

Client API for managing End Entities and Certificates

Reset password for End Entity

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

raProfileName required	string RA Profile name
username required	string Username

Responses

Response samples

400
403
404
502
503

Content type

application/json

{"message": "Error message"
}

List all End Entities

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

raProfileName

required

string

RA Profile name

Responses

Response samples

Content type

application/json

[{"subjectDN": "string",
"email": "string",
"extensionData": [{"name": "string",
"value": "string"
}
],
"subjectAltName": "string",
"status": "NEW",
"username": "string"
}
]

Add End Entity

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

raProfileName

required

string

RA Profile name

Request Body schema: application/json
required

required	object (RaProfileDto) RA profile related to End Entity
email	string End Entity email
	Array of objects (EndEntityExtendedInfoDto) End Entity extension data
password required	string End Entity password
subjectAltName	string End Entity Subject alternative name
subjectDN required	string End Entity subject domain name
username required	string End Entity name

Responses

Request samples

Payload

Content type

application/json

{"raProfile": {"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"authorityInstanceUuid": "string",
"authorityInstanceName": "string",
"legacyAuthority": true,
"enabled": true,
"attributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"enabledProtocols": ["string"
],
"certificateValidationSettings": {"enabled": true,
"frequency": 1,
"expiringThreshold": 1
}
},
"email": "string",
"extensionData": [{"name": "string",
"value": "string"
}
],
"password": "string",
"subjectAltName": "string",
"subjectDN": "string",
"username": "string"
}

Response samples

400
403
404
502
503

Content type

application/json

{"message": "Error message"
}

Get End Entity information

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

raProfileName required	string RA Profile name
username required	string Username

Responses

Response samples

Content type

application/json

{"subjectDN": "string",
"email": "string",
"extensionData": [{"name": "string",
"value": "string"
}
],
"subjectAltName": "string",
"status": "NEW",
"username": "string"
}

Edit End Entity

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

raProfileName required	string RA Profile name
username required	string Username

Request Body schema: application/json
required

required	object (RaProfileDto) RA profile related to End Entity
email	string End Entity email
	Array of objects (EndEntityExtendedInfoDto) End Entity extension data
password required	string End Entity password
subjectAltName	string End Entity Subject alternative name
subjectDN required	string End Entity subject domain name
status required	string Enum: "NEW" "FAILED" "INITIALIZED" "IN_PROCESS" "GENERATED" "REVOKED" "HISTORICAL" "KEY_RECOVERY" "WAITING_FOR_ADD_APPROVAL" End Entity Subject domain name

Responses

Request samples

Payload

Content type

application/json

{"raProfile": {"uuid": "7b55ge1c-844f-11dc-a8a3-0242ac120002",
"name": "Name",
"description": "string",
"authorityInstanceUuid": "string",
"authorityInstanceName": "string",
"legacyAuthority": true,
"enabled": true,
"attributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"customAttributes": [{"content": [{"reference": "string",
"data": true
}
],
"uuid": "b11c9be1-b619-4ef5-be1b-a1cd9ef265b7",
"name": "Attribute",
"label": "Attribute Name",
"type": "data",
"contentType": "string",
"version": "v2"
}
],
"enabledProtocols": ["string"
],
"certificateValidationSettings": {"enabled": true,
"frequency": 1,
"expiringThreshold": 1
}
},
"email": "string",
"extensionData": [{"name": "string",
"value": "string"
}
],
"password": "string",
"subjectAltName": "string",
"subjectDN": "string",
"status": "NEW"
}

Response samples

400
403
404
502
503

Content type

application/json

{"message": "Error message"
}

Revoke all Certificates and delete End Entity

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

raProfileName required	string RA Profile name
username required	string Username

Responses

Response samples

400
403
404
502
503

Content type

application/json

{"message": "Error message"
}

Revoke Certificate

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

raProfileName

required

string

RA Profile name

Request Body schema: application/json
required

certificateSN required	string Certificate serial number
issuerDN required	string Issuer domain name
reason required	string (CertificateRevocationReason) Enum: "unspecified" "keyCompromise" "cACompromise" "affiliationChanged" "superseded" "cessationOfOperation" "certificateHold" "privilegeWithdrawn" "aACompromise" Revocation reason

Responses

Request samples

Payload

Content type

application/json

{"certificateSN": "string",
"issuerDN": "string",
"reason": "unspecified"
}

Response samples

400
403
404
502
503

Content type

application/json

{"message": "Error message"
}

Issue Certificate

Authorizations:

BearerJWTAuthCertificateAuthSessionAuth

path Parameters

raProfileName

required

string

RA Profile name

Request Body schema: application/json
required

password required	string End Entity password
pkcs10 required	string Certificate sign request (PKCS#10) encoded as Base64 string
username required	string End Entity username

Responses

Request samples

Payload

Content type

application/json

{"password": "string",
"pkcs10": "string",
"username": "string"
}

Response samples

Content type

application/json

{"certificateData": "string"
}

Client Operations API (2.18.0)

Client Operations v2

Issue certificate

Authorizations:

path Parameters

Request Body schema: application/jsonrequired

Responses

Request samples

Response samples

Revoke certificate

Authorizations:

path Parameters

Request Body schema: application/jsonrequired

Responses

Request samples

Response samples

Confirm an asynchronous certificate revocation

Authorizations:

path Parameters

Responses

Response samples

Renew certificate

Authorizations:

path Parameters

Request Body schema: application/jsonrequired

Responses

Request samples

Response samples

Rekey Certificate

Authorizations:

path Parameters

Request Body schema: application/jsonrequired

Responses

Request samples

Response samples

Issue an existing certificate request

Authorizations:

path Parameters

Responses

Response samples

Finalize an asynchronous certificate issuance

Authorizations:

path Parameters

Request Body schema: application/jsonrequired

Responses

Request samples

Response samples

Cancel a pending certificate operation

Authorizations:

path Parameters

Request Body schema: application/json

Responses

Request samples

Response samples

Validate revocation attributes

Authorizations:

path Parameters

Request Body schema: application/jsonrequired

Responses

Request samples

Response samples

Validate issue certificate attributes

Authorizations:

path Parameters

Request Body schema: application/jsonrequired

Responses

Request samples

Response samples

Get revocation attributes

Authorizations:

path Parameters

Responses

Response samples

Get issue certificate attributes

Authorizations:

path Parameters

Responses

Response samples

Legacy Client Operations

Reset password for End Entity

Request Body schema: application/json
required

Request Body schema: application/json
required

Request Body schema: application/json
required

Request Body schema: application/json
required

Request Body schema: application/json
required

Request Body schema: application/json
required

Request Body schema: application/json
required

Request Body schema: application/json
required

Request Body schema: application/json
required

Request Body schema: application/json
required

Request Body schema: application/json
required