Table of Contents

Function

The Certificate Object represents all the information in a certificate. It is used for most functions in the SSL Manager API and is the most important core element of the API.

The creation date (created) is always set to the start of the day.
Example: 2017-01-01 13:59:27 is set to 2017-01-01 00:00:00

The expiration date (expire) is always set to the end of the day.
Example: 2017-01-01 13:59:27 is set to 2017-01-01 23:59:59

Structure

Keyword JSONKeyword XMLOccursTypeFormatDescription
adminContactadmin1objectSSLContactThe administrative contact
authenticationauthentication0 - 1objectCertAuthenticationThe authentication of the certificate
certificateTransparencycertificate_transparency0 - 1boolean
Activates the certificate transparency for a certificate. Default is "True".
certificateTransparencyPrivacycertificate_transparency_privacy0 - 1enumCertificateTransparencyPrivacyThe privacy settings for certificate transparency. Default is "Redacted".
certificationAuthoritycertification_authority0 - nobjectCaCertificateThe intermediates for the certificate
commentcomment1string
User defined field. Can only be updated in JSON via PUT /certificate/{id}/_comment. The corresponding ACLs are required for this.
createdcreated0 - 1stringdate

The date on which the object was created.

The creation date is always set to the beginning of the day. Example : 2017-01-01 13:59:27 becomes 2017-01-01 00:00:00

csrcsr1string

CSR - Key (Certificate Signing Request)

domaindomain
string
The domain, the certificate belongs to
expireexpire0 - 1stringdateThe date on which the certificate expires
extensionextension0 - 1objectExtendedValidationAddonAdditional validation data. Only certain Comodo products require this
firstnamefirstname0 - 1string
First Name. Only for S/MIME!
hasCsrhas_csr0 - 1boolean
States if a self created CSR is to be used for S/MIME. Default is false. Only for S/MIME!
historieshistories0 - 1object
Certificate history (old versions)
idid1integerInt32The unique certificate ID
lastnamelastname0 - 1string
Last Name. Only for S/MIME!
lifetimelifetime1integerInt32The certificate term in months
namename1string
The name of the certificate
orderIdorder_id1string
The unique certificate order number
organizationUnitNameorganization_unit_name0 - 1string
Department name. Only for S/MIME!
ownerowner0 - 1objectUserThe owner of the certificate in the system
passwordpassword0 - 1string
The password that is to be used for the certificate download. Only for S/MIME!
productproduct1enumSSLProduct

Defines the different certificate products.

serialNumberserial_number0 - 1string
Serial number of the certificate
serverserver0 - 1string
The certificate
signatureHashAlgorithmsha1enumSignatureHashAlgorithm

The signature hash algorithm which was used.

softwaresoftware1enumServerSoftwareTypeThe webserver software in use
subjectAlternativeNamesubject_alternative_name0 - nobjectSubjectAlternativeNameSubject Alternative Name ( SAN )
technicalContacttechnical1objectSSLContactThe technical contact
updatedupdated0 - 1stringdateThe date on which the object was last updated
updaterupdater0 - 1objectUserThe user who last updated the certificate in the system
partnerOrderIdpartner_order_id1string
The order number of the related request
codeSigningTypecodeSigningType1objectCodeSigningTypeThe type of code signing
codeSigningProvisioningMethodcodeSigningProvisioningMethod1objectCodeSigningProvisioningMethodThe provisioning method for the code signing token
codeSigningHardwarePlatformcodeSigningHardwarePlatform1objectCodeSigningHardwarePlatformThe hardware platform for the code signing token
certificateTypecertificateType1objectCertificateTypeThe type of the certificate
signatureHashAlgorithmsha1objectSignatureHashAlgorithmThe signature hash algorithm which was used
payablepayable1stringdateThe payable date for the certificate. Indicates when a runtime renewal must take place.
hsmType
0 -1enum

Describes existing HSM or desired delivery of an HSM (hardware security module)

Possible values:

  • LUNA = HSM of this type available
  • YUBIKEY = HSM of this type available
  • undefined = no HSM available, HSM is to be supplied at a charge

Default value = undefinded

Only relevant for Sectigo.

keyAttestation
0 -1stringbase 64

Proves that a private key has been generated within an HSM (hardware security module).

Must only be specified if "LUNA" or "YUBIKEY" was selected for hsmType.
Otherwise, the certificate on the HSM is sent to the address stored in the admin contact.

Only relevant for Sectigo

globalSignPickupMethod
0 -1enum

Method how the created certificate can be downloaded after the order (and its validation).


Only relevant for Global Sign.