Reissue Certificate

Instructions für complete automation of the certificate reissuing process. In the case of reissue, certificates with a new CSR key are reissued. The QuickSSLPremium product is used here as an example and DNS is used as authentication method.

Table of Contents

Basics of the JSON and XML API

All important information for the use of the JSON and XML API can be found under the following links:

JSON API General Information and further articles
SSL XML API

Process Overview

Flow Chart

Tasks Names, Codes and Routes

Task	Code	Route
CertificatePrepareOrder	400110	POST /certiicate/prepareOrder
CertificateReissue	400102	PUT /certificate/ {id}
PollInfo	0905	GET /poll
PollConfirm	0906	PUT /poll/$id
CertificateInfo	400104	GET /certificate/$id

DNS Validation

DNS validation, i.e. validation by zone entry, is supported by many domain-validated certificates. To do this, für some CAs you must store a specific TXT or CNAME record in the zone belonging to the certificate name. This is checked for validity by the issuing certificate authority. If the corresponding zone is managed by InterNetX, the provisioning of the zone takes place automatically.

Preparation

If the two systems are already linked, this step can be skipped.

Connect SSLManager to AutoDNS

For the automatic provisioning of the zone, you have to connect the SSLManager to your AutoDNS access once. In the SSL Manager go to the User Configuration and click on the menu item Connect SSL Manager to the Domain Administration System.

If necessary, you must enter the URL to your AutoDNS yourself.

You will then be redirected to the AutoDNS login page. Enter your AutoDNS credentials here to establish the connection.

Reissue a QuickSSLPremium Certificate

Create DNS Record and check CSR

QuickSSLPremium certificates are verified by TXT entries. A new TXT record with specific values must be stored in the zone belonging to the common name (CNAME). With the CertificatePrepareOrder task, the CSR key provided is checked for the correct bit length, for example, and the required authentication data is generated.

Example .TXT : 
example.com. 300 IN TXT "201704071405295z34is5g0jjairsdu0v5opdw8512td8kixzvtaacu4ebrkry5q"

CertificatePrepareOrder - Example

Request

POST /certificate/prepareOrder
{
  "plain": "----BEGIN CERTIFICATE REQUEST----- .... -----END CERTIFICATE REQUEST-----",
  "product": "QUICKSSLPREMIUM"
}

Response

{
    "stid": "20180926-stid",
    "status": {
        "code": "S400110",
        "text": "CSR key was checked successfully.",
        "type": "SUCCESS"
    },
    "data": [
        {
            "plain": "-----BEGIN CERTIFICATE REQUEST----- ... -----END CERTIFICATE REQUEST-----",
            "name": "example.com",
            "keySize": 2048,
            "countryCode": "DE",
            "state": "BY",
            "city": "Regensburg",
            "organization": "Company GmbH",
            "organizationUnit": "Entwicklung",
            "product": "QUICKSSLPREMIUM",
            "authentication": [
                {
                    "method": "EMAIL",
                    "approverEmails": [
                        "admin@example.com",
                        "administrator@example.com",
                        "hostmaster@example.com",
                        "webmaster@example.com",
                        "postmaster@example.com"
                    ]
                },
                {
                    "method": "DNS",
                    "dns": "example.com.\t\t300\tIN\tTXT\t\"2018092608362142n4sbul8rv8ttv7zkhjgzvyim8n1kpa9lys0uqdszxzs0pa0l\""
                },
                {
                    "method": "FILE"
                }
            ],
            "algorithm": "RSA",
            "signatureHashAlgorithm": "SHA256"
        }
    ]
}

Request

<request>
    <auth>
        <user>USER</user>
        <context>CONTEXT</context>
        <password>PASSWORD</password>
    </auth>
    <task>
        <code>400110</code>
        <certificate_request>
            <plain><![CDATA[----BEGIN CERTIFICATE REQUEST----- .... -----END CERTIFICATE REQUEST-----]]></plain>
            <product>QUICKSSLPREMIUM</product>
        </certificate_request>
    </task>
</request>

Response

<response>
    <result>
        <data>
            <certificate_request>
                <plain><![CDATA[-----BEGIN CERTIFICATE REQUEST----- ... -----END CERTIFICATE REQUEST-----]]></plain>
                <name><![CDATA[example.com]]></name>
                <key_size>2048</key_size>
                <country_code>DE</country_code>
                <state><![CDATA[Bayern]]></state>
                <city><![CDATA[Regensburg]]></city>
                <organization><![CDATA[Company GmbH]]></organization>
                <organization_unit>Entwicklung</organization_unit>
                <email>email@example.com</email>
                <product>QUICKSSLPREMIUM</product>
                <authentication>
                    <method>DNS</method>
                    <dns>example.com. 300 IN TXT "201704071405295z34is5g0jjairsdu0v5opdw8512td8kixzvtaacu4ebrkry5q"</dns>
     				<provisioning>1</provisioning>
                </authentication>
                <authentication>
                    <method>FILE</method>
                    <file_name><![CDATA[http://example.com/.well-known/pki-validation/fileauth.txt]]></file_name>
                    <file_content><![CDATA[201704071405295z34is5g0jjairsdu0v5opdw8512td8kixzvtaacu4ebrkry5q]]></file_content>
                </authentication>
                <algorithm>RSA</algorithm>
                <signature_hash_algorithm>SHA256</signature_hash_algorithm>
            </certificate_request>
        </data>
        <status>
            <code>S400110</code>
            <text>CSR key was checked successfully.</text>
            <type>success</type>
        </status>
    </result>
</response>

Certificate Reissue

The task CertificateReissue starts the reissue of the certificate. You must set the same data for the order as for a CertificateCreate.

Request

PUT /certificate/$id
{
  "adminContact": {
    "id": 100
  },
  "technicalContact": {
    "id": 100
  },
  "name": "example.com",
  "lifetime": {
    "unit": "MONTH",
    "period": 12
  },
  "software": "APACHESSL",
  "csr": "-----BEGIN CERTIFICATE REQUEST----- ... -----END CERTIFICATE REQUEST-----",
  "product": "QUICKSSLPREMIUM",
  "authentication": {
    "method": "DNS",
    "dns": "example.com.\t\t300\tIN\tTXT\t\"2018092608362142n4sbul8rv8ttv7zkhjgzvyim8n1kpa9lys0uqdszxzs0pa0l\"",
    "provisioning": true
  }
}

Response

{
    "stid": "20180926-stid",
    "status": {
        "code": "N400101",
        "text": "Certificate order was started successfully.",
        "type": "NOTIFY"
    },
    "object": {
        "type": "certificate",
        "value": "example.com"
    },
    "data": [
        {
            "id": 123456
        }
    ]
}

Request

<request>
    <auth>
        <user>USER</user>
        <password>PASSWORD</password>
        <context>CONTEXT</context>
    </auth>
    <task>
        <code>400102</code>
        <certificate>
            <id>100</id>
            <technical>
                <id>100</id>
            </technical>
            <admin>
                <id>100</id>
            </admin> 
            <name>example.com</name>
            <product>QUICKSSLPREMIUM</product>
            <authentication>
                <method>DNS</method>
                <dns>example.com. 300 IN TXT "201704071405295z34is5g0jjairsdu0v5opdw8512td8kixzvtaacu4ebrkry5q"</dns> 
                <provisioning>1</provisioning>
            </authentication>
            <lifetime>12</lifetime>
            <software>APACHESSL</software> <!-- APACHESSL / IIS5 -->
            <csr><![CDATA[---------BEGIN CERTIFICATE REQUEST----- .... -----END CERTIFICATE REQUEST-----]]></csr> <!-- Der CSR KEY -->
        </certificate>
    </task>
</request>

Response

<response>
  <result>
    <data>
      <certificate_job>
        <job>
          <id>123456</id>
          <status>RUNNING</status>
        </job>
      </certificate_job>
    </data>
    <status>
      <code>N400101</code>
      <text>Certificate order was started successfully.</text>
      <type>notify</type>
      <object>
        <type>certificate</type>
        <value>example.com</value>
      </object>
    </status>
  </result>
</response>

Checking and Confirming Notifications

The CertificateCreate task automatically generates a request for ordering the certificate. Once the request has been processed, a request notification is generated with information about the request. You can query this using the order type PollInfo. If the order was successful, you receive, among other things, the ID of the certificate ordered. Finally you have to confirm the order with PollConfirm.

PollInfo - Example

Request

GET /poll

Response

{
  "stid": "20181212-app1-demo-9552",
  "status": {
    "code": "S0905",
    "text": "The notification was polled successfully.",
    "type": "SUCCESS"
  },
  "object": {
    "type": "message",
    "value": "1405661",
    "summary": 1
  },
  "data": [
    {
      "id": 1405661,
      "job": {
        "created": "2018-12-12T10:53:23.000+0100",
        "updated": "2018-12-12T10:53:36.000+0100",
        "status": "SUCCESS",
        "execution": "2018-12-12T10:53:23.000+0100",
        "id": 9218783,
        "type": "ssl",
        "subType": "QUICKSSLPREMIUM",
        "action": "create"
      },
      "stid": "20181212-app1-demo-9520",
      "object": {
        "type": "Certificate",
        "value": "example.com",
        "data": {
          "created": "2018-12-12T00:00:00.000+0100",
          "id": 571,
          "orderId": "2743098",
          "adminContact": {
            "fname": "John",
            "lname": "Doe",
            "phone": "+49-123-12345",
            "email": "john.doe@example.com",
            "title": "Admin",
            "organization": "Company",
            "address": [
              "123 Main Street"
            ],
            "pcode": "12345",
            "city": "Anytown",
            "country": "DE",
            "state": "BY",
            "id": 1120
          },
          "technicalContact": {
            "fname": "John",
            "lname": "Doe",
            "phone": "+49-123-12345",
            "email": "john.doe@example.com",
            "title": "Admin",
            "organization": "Company",
            "address": [
              "123 Main Street"
            ],
            "pcode": "12345",
            "city": "Anytown",
            "country": "DE",
            "state": "BY",
            "id": 1120
          },
          "name": "example.com",
          "lifetime": {
            "unit": "MONTH",
            "period": 12
          },
          "software": "APACHESSL",
          "csr": "-----BEGIN CERTIFICATE REQUEST-----\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\n-----END CERTIFICATE REQUEST-----",
          "server": "-----BEGIN CERTIFICATE-----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\ndaAT0onlmtOFjZFK09QsVBQ0Qw==\n-----END CERTIFICATE-----\n",
          "serialNumber": "6CA6BD336FCFF808D72E231B4A7A84C",
          "product": "QUICKSSLPREMIUM",
          "expire": "2019-12-12T12:00:00.000+0100",
          "authentication": {
            "method": "DNS",
            "dns": "example.com.\t300\tIN\tTXT\t\"201812120900493xe6hfcrtaclrn0poyu106wc2qbw095ifgujkadu4dzbltao8d\"",
            "provisioning": true
          },
          "certificateTransparencyPrivacy": "PUBLIC",
          "hasCsr": false
        }
      }
    }
  ]
}

Request

<request>
    <auth>
        <user>USER</user>
        <context>CONTEXT</context>
        <password>PASSWORD</password>
    </auth>
    <task>
        <code>0905</code>
    </task>
</request>

Response

<response>
    <result>
        <data>
            <summary>1</summary>
            <message>
                <id>1855680</id>
                <owner>
                    <user>alex_normal_plus</user>
                    <context>4</context>
                </owner>
                <job>
                    <domain>
                        <name>example.com</name>
                        <expire>2019-10-15 14:02:40</expire>
                        <payable>2019-10-15 14:02:41</payable>
                        <ownerc>100</ownerc>
                        <adminc>100</adminc>
                        <techc>100</techc>
                        <nic_member_label>VGRS-TEST</nic_member_label>
                        <registry_status>LOCK</registry_status>
                        <nserver>
                            <name>a.ns14.net</name>
                        </nserver>
                        <nserver>
                            <name>b.ns14.net</name>
                        </nserver>
                        <nserver>
                            <name>c.ns14.net</name>
                        </nserver>
                        <nserver>
                            <name>d.ns14.net</name>
                        </nserver>
                        <period>1</period>
                        <authinfo>S0Lygv+ZkNbniICm</authinfo>
                        <autorenew>true</autorenew>
                        <confirm_order>1</confirm_order>
                        <confirm_owner_consent>0</confirm_owner_consent>
                        <registrar_status>ACTIVE</registrar_status>
                        <rdds_opt_in>NOT_SET</rdds_opt_in>
                        <owner/>
                        <updater/>
                        <created>2018-10-15 14:02:41</created>
                    </domain>
                    <job_id>4295625406</job_id>
                    <status>
                        <code>S0101</code>
                        <type>success</type>
                        <object>
                            <type>domain</type>
                            <value>example.com</value>
                        </object>
                    </status>
                    <stid>20181015-app1-3788</stid>
                </job>
                <created>2018-10-15 14:03:02</created>
            </message>
        </data>
        <status>
            <code>S0905</code>
            <text>The notification was polled successfully.</text>
            <type>success</type>
            <object>
                <type>message</type>
                <value>1855680</value>
            </object>
        </status>
    </result>
    <stid>20181015-app1-3805</stid>
</response>

PollConfirm - Example

Request

PUT /poll/{id}

Response

{
    "stid": "20180926-stid",
    "status": {
        "code": "S0906",
        "text": "The notification was confirmed successfully.",
        "type": "SUCCESS"
    },
    "object": {
        "type": "message",
        "value": "1819853"
    }
}

Request

<request>
    <auth>
        <user>USER</user>
        <context>CONTEXT</context>
        <password>PASSWORD</password>
    </auth>
    <task>
        <code>0906</code>
       <message>
            <id>650664</id>
        </message>
    </task>
</request>

Response

<response>
    <result>
        <data>
            <summary>0</summary>
            <message>
                <id>650664</id>
            </message>
        </data>
        <status>
            <code>S0906</code>
            <text>The notification was confirmed successfully.</text>
            <type>success</type>
            <object>
                <type>message</type>
                <value>650664</value>
            </object>
        </status>
         <stid>20181015-app1-3162</stid>
	 </result>
</response>

Inquire Certificate Data

The CertificateInfo task inquires the certificate data. The data can be queried and confirmed using the ID from the Reissue Certificate step.

Certificate Info - Example

Request

GET /certificate/$id

Response

{
  "stid": "20181212-app1-demo-9667",
  "status": {
    "code": "S400104",
    "text": "Certificate data were inquired successfully.",
    "type": "SUCCESS"
  },
  "object": {
    "type": "Certificate",
    "value": "example.com"
  },
  "data": [
    {
      "created": "2018-12-12T00:00:00.000+0100",
      "updated": "2018-12-12T11:05:25.000+0100",
      "owner": {
        "context": 9,
        "user": "customer"
      },
      "updater": {
        "context": 9,
        "user": "customer"
      },
      "id": 571,
      "orderId": "2743098",
      "adminContact": {
        "fname": "Johnny",
        "lname": "Does",
        "phone": "+49-123-12345",
        "email": "john.doe@example.com",
        "title": "Admin",
        "organization": "Company",
        "address": [
          "123 Main Street"
        ],
        "pcode": "12345",
        "city": "Anytown",
        "country": "DE",
        "state": "BY",
        "id": 1120
      },
      "technicalContact": {
        "fname": "John",
        "lname": "Does",
        "phone": "+49-123-12345",
        "email": "john.doe@example.com",
        "title": "Admin",
        "organization": "Company",
        "address": [
          "123 Main Street"
        ],
        "pcode": "12345",
        "city": "Anytown",
        "country": "DE",
        "state": "BY",
        "id": 1120
      },
      "name": "example.com",
      "lifetime": {
        "unit": "MONTH",
        "period": 12
      },
      "software": "APACHESSL",
      "csr": "-----BEGIN CERTIFICATE REQUEST-----\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\n-----END CERTIFICATE REQUEST-----",
      "server": "-----BEGIN CERTIFICATE-----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\ndaAT0onlmtOFjZFK09QsVBQ0Qw==\n-----END CERTIFICATE-----\n",
      "serialNumber": "6CA6BD336FCFF808D72E231B4A7A84C",
      "product": "QUICKSSLPREMIUM",
      "certificateType": "FQDN",
      "signatureHashAlgorithm": "SHA2",
      "expire": "2019-12-12T12:00:00.000+0100",
      "histories": [
      ],
      "certificationAuthority": [
        {
          "created": "2018-12-12T11:05:26.168+0100",
          "updated": "2018-12-12T11:05:25.000+0100",
          "caType": "INTERMEDIATE",
          "caCertificate": "-----BEGIN CERTIFICATE-----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\n+1zGRSYclL9uf8vtREx5A8KOmjYSFcMCGe8VoT75d4a5H0rQOoqzb5Ct\n-----END CERTIFICATE-----"
        },
        {
          "created": "2018-12-12T11:05:26.168+0100",
          "updated": "2018-12-12T11:05:25.000+0100",
          "caType": "ROOT",
          "caCertificate": "-----BEGIN CERTIFICATE-----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\n8VVjbZtz5h3+93NtPg==\n-----END CERTIFICATE-----"
        }
      ],
      "authentication": {
        "method": "DNS",
        "dns": "example.com.\t300\tIN\tTXT\t\"201812120900493xe6hfcrtaclrn0poyu106wc2qbw095ifgujkadu4dzbltao8d\"",
        "provisioning": true
      },
      "certificateTransparencyPrivacy": "PUBLIC",
      "domain": "example.com"
    }
  ]
}

Request

<request>
    <auth>
        <user>USER</user>
        <context>CONTEXT</context>
        <password>PASSWORD</password>
    </auth>
    <task>
        <code>400104</code>
        <certificate>
            <id>100</id>
        </certificate>
    </task>
</request>

Response

<response>
  <result>
    <data>
      <certificate>
        <order_id>1003396954</order_id>
        <technical>
          <first>John</first>
            <last>Doe</last>
            <phone>+49-941-1234560</phone>
            <email>j.doe@example.com</email>
            <title>Admin</title>
            <organization>Example GmbH</organization>
            <address>Maximilianstrasse 36000</address>
            <postal_code>93047</postal_code>
            <city>Regensburg</city>
            <country>DE</country>
            <state>Bayern</state>
          <owner>
            <user>USER</user>
            <context>CONTEXT</context>
          </owner>
          <updater>
            <user>USER</user>
            <context>CONTEXT</context>
          </updater>
          <id>20398</id>
          <created>2017-01-01 10:35:22</created>
          <updated>2017-01-01 01:05:07</updated>
        </technical>
        <admin>
          <first>John</first>
            <last>Doe</last>
            <phone>+49-941-1234560</phone>
            <email>j.doe@example.com</email>
            <title>Admin</title>
            <organization>Example GmbH</organization>
            <address>Maximilianstrasse 36000</address>
            <postal_code>93047</postal_code>
            <city>Regensburg</city>
            <country>DE</country>
            <state>Bavaria</state>
          <owner>
            <user>USER</user>
            <context>CONTEXT</context>
          </owner>
          <updater>
            <user>USER</user>
            <context>CONTEXT</context>
          </updater>
          <id>20398</id>
          <created>2017-01-01 10:35:22</created>
          <updated>2017-01-01 01:05:07</updated>
        </admin> 
        <name>example.com</name><!-- ertificate name -->
        <lifetime>12</lifetime><!-- certificate runtime -->
        <software>APACHE2</software>
        <csr><![CDATA[----BEGIN CERTIFICATE REQUEST----- .... -----END CERTIFICATE REQUEST-----]]></csr>
        <server><![CDATA[----BEGIN CERTIFICATE ----- .... -----END CERTIFICATE-----]]></server>
        <serial_number>SERIALNUMBER</serial_number>
        <product>QUICKSSLPREMIUM</product>
        <sha>SHA2</sha>
        <expire>2030-01-01 23:59:59</expire><!-- certificate expire date -->
        <extension />
        <certification_authority>
          <ca_type>ICA1</ca_type>
          <ca_cert><![CDATA[----BEGIN CERTIFICATE ----- .... -----END CERTIFICATE-----]]></ca_cert>
        </certification_authority>
        <authentication>
          <method>DNS</method>
          <dns>example.com. 300 IN TXT "201704071405295z34is5g0jjairsdu0v5opdw8512td8kixzvtaacu4ebrkry5q"</dns>
        </authentication>
        <owner>
          <user>USER</user>
          <context>CONTEXT</context>
        </owner>
        <updater>
          <user>USER</user>
          <context>CONTEXT</context>
        </updater>
        <id>100</id><!-- certificate id -->
        <created>2017-01-01 00:00:00</created>
        <updated>2017-01-01 14:30:36</updated>
      </certificate>
    </data>
    <status>
      <code>S400104</code>
      <text>Certificate data were inquired successfully.</text>
      <type>success</type>
      <object>
        <type>certificate</type>
        <value>example.com</value><!-- certificate name -->
      </object>
    </status>
  </result>
</response>