Suche in diesem Bereich

Skip to end of metadata
Go to start of metadata


Table of contents

Function

The CertificateReissue task allows you to change the CSR key of an existing certificate. If the request is successfully accepted by the system, a new job is created which initiates the reissue of the certificate. As a response, the ID of the created job is returned.

It is not possible to change the authentication method when initiating a reissue.

Description

Route: PUT /certificate/{id}

Request
{
   "adminContact": {
      "id": 100
   },
   "technicalContact": {
      "id": 100
   },
   "name": "example.com",
   "lifetime": {
      "unit": "MONTH",
      "period": 12
   },
   "software": "APACHESSL",
   "csr": "-----BEGIN CERTIFICATE REQUEST-----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\nW+WeLiQdsguYE909jusovPjG3BUiFGHlvA1L2IU7coK0xi4B\n-----END CERTIFICATE REQUEST-----",
   "product": "QUICKSSLPREMIUM",
   "authentication": {
      "method": "EMAIL",
      "approverEmails": [
         "admin@example.com"
      ]
   }
}
Response
{
   "stid": "20190627-app3-dev-10566",
   "status": {
      "code": "N400102",
      "text": "Certificate reissue was started successfully.",
      "type": "NOTIFY"
   },
   "object": {
      "type": "Certificate",
      "value": "example.com"
   },
   "data": [
      {
         "id": 4297539520
      }
   ]
}

Task number: 400102
Uses Certificate object

CertificateReissue Request
<request>
    <auth>
        <user>USER</user>
        <password>PASSWORD</password>
        <context>CONTEXT</context>
    </auth>
    <task>
        <certificate>
            <id>100</id>
            <product>QUICKSSLPREMIUM</product>
            <lifetime>36</lifetime>
            <software>APACHE2</software>
            <sha>SHA2_FULL_CHAIN</sha>
            <certificate_transparency_privacy>PUBLIC</certificate_transparency_privacy>
            <csr><![CDATA[-----BEGIN CERTIFICATE REQUEST----- ... -----END CERTIFICATE REQUEST-----]]></csr>
            <name>domain.com</name>
            <subject_alternative_name>
                <name>san1.domain.com</name>
            </subject_alternative_name>
            <subject_alternative_name>
                <name>san2.domain.com</name>
            </subject_alternative_name>
            <subject_alternative_name>
                <name>san3.domain.com</name>
            </subject_alternative_name>
            <admin>
                <id>100</id>
            </admin>
            <technical>
                <id>100</id>
            </technical>
            <authentication>
                <method>DNS</method>
                <dns>stvrvkg19vib8j5o1p35is3forhbo7zp.example.com.    300    IN    CNAME    s20170131154625.example.com.</dns>
                <provisioning>1</provisioning>
            </authentication>
        </certificate>
        <ctid>request-100001</ctid>
        <code>400102</code>
    </task>
</request>
CertificateReissue Response
<response>
    <result>
        <data>
            <certificate_job>
                <job>
                    <id>4295014839</id>
                    <status>RUNNING</status>
                </job>
            </certificate_job>
        </data>
        <status>
            <code>N400102</code>
            <text>Certificate reissue was started successfully.</text>
            <type>notify</type>
            <object>
                <type>certificate</type>
                <value>domain.com</value>
            </object>
        </status>
    </result>
    <ctid />
</response>

Possible Error Codes

The following error codes may be displayed when using the CertificateReissue task:

  • EF4001021= The transition of the auth method is not allowed.