Skip to main content

Renew Certificate

Certificate can be renewed. The renewal operation does not need additional Attributes or any information other than certificate signing request. This is one of advantages of RA Profile.

info

Only the Certificate that is bound to RA Profile can be renewed.

Renew Certificate using the API​

To renew Certificate, use the following API request:

curl -X POST \
  --cacert [ca-cert] \
  --cert [client-cert] \
  --cert-type [type] \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  --data '
  {
    "pkcs10": "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"
  }' \
  https://[domain]:[port]/api/v2/operations/authorities/e045a12a-e114-45ed-90b8-bac7e750e803/raProfiles/166b5cf52-63f2-11ec-90d6-0242ac120003/certificates/renew
  #https://[domain]:[port]/api/v2/operations/authorities/{authorityUuid}/raProfiles{raProfileUuid}/certificates/renew

When the Certificate is successfully renews, its content and uuid is sent back in the response:

{
  "certificateData": "-----BEGIN CERTIFICATE-----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\n0bmOtWX+yWWB42fYEFecH3X6STNwoXnBck4pzegC2jBEh15a1gy8Vwii\n-----END CERTIFICATE-----",
  "uuid": "bde30bad-2bbe-467c-83e5-d3eace339a7e"
}

Renew Certificate using the Web Interface​

Follow these steps to renew a Certificate:

  1. Click Certificates in the left menu
  2. In the List of Certificates select the Certificate to renewal
  3. Click Renew (symbol )
  4. Upload the certificate signing request (CSR file)
  5. Click Renew

The Certificate has been successfully renewed and information is update in the inventory. You can check the Certificate status.