Create AuthKey

2 minute read

POST https://www.digicert.com/services/v2/account/auth-key

Use this endpoint to create an AuthKey for your DigiCert CertCentral® account. You can use the same AuthKey for all DV certificate orders associated with the account.

Create a non-expiring AuthKey

POST https://www.digicert.com/services/v2/account/auth-key

An account can have only one non-expiring AuthKey. If a non-expiring AuthKey already exists, the request returns a 400 Bad Request response with the auth_key_exists_for_account error.

Create a TTL AuthKey

POST https://www.digicert.com/services/v2/account/auth-key/{days}

Use this endpoint to create an AuthKey with a defined validity period, also called a Time-to-Live (TTL) AuthKey. An account can have multiple TTL AuthKeys. The minimum validity period is one day, and there is no maximum validity period.

Example requests and responses

curl -X POST \
  https://www.digicert.com/services/v2/account/auth-key \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}'

curl -X POST \
  https://www.digicert.com/services/v2/account/auth-key/30 \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}'

import requests

days = 30
url = f"https://www.digicert.com/services/v2/account/auth-key/{days}"

payload = ""
headers = {
    'X-DC-DEVKEY': "{{api_key}}",
    'Content-Type': "application/json"
    }

response = requests.request("POST", url, data=payload, headers=headers)

print(response.text)

package main

import (
	"fmt"
	"net/http"
	"io/ioutil"
)

func main() {

days := 30
url := fmt.Sprintf(
	"https://www.digicert.com/services/v2/account/auth-key/%d",
	days,
)

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("X-DC-DEVKEY", "{{api_key}}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}

var request = require("request");

var options = { method: 'POST',
  url: 'https://www.digicert.com/services/v2/account/auth-key/30',
  headers: 
   { 'Content-Type': 'application/json',
     'X-DC-DEVKEY': '{{api_key}}' } };

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});

200 OK

{
  "auth_key_id": "{{auth_key_id}}",
  "auth_key": "{{auth_key}}"
  "expiration_datetime": "2025-06-06T18:24:09+00:00"

}

Path parameters

Name	Type	Required	Description
days	integer	required	Number of days the AuthKey remains valid. The minimum value is `1`. Required while creating a TTL AuthKey.

Response parameters

Name	Type	Description
auth_key_id	string	ID of the created AuthKey.
auth_key	string	AuthKey associated with your DigiCert CertCentral® account.
expiration_datetime	string	UTC timestamp in ISO 8601 format indicating when the TTL AuthKey expires. Omitted for non-expiring AuthKeys.

Was this page helpful?

Provide feedback