Order Document Signing for Individual

POST https://www.digicert.com/services/v2/order/certificate/ds_individual
Use this endpoint to order a Document Signing for Individual certificate.

Document Signing for Individual certificate is issued to you to apply electronic signatures. This assures the recipients that the document is from you and that the document’s integrity has not been compromised or altered. DigiCert document signing certificates are compatible with Adobe Acrobat, DocuSign, Microsoft Office, OpenOffice, and LibreOffice documents.

Example requests and responses

curl -X POST \
  'https://www.digicert.com/services/v2/order/certificate/ds_individual' \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
  -d '{
    "certificate": { 
        "signature_hash": "sha256",
        "usage_designation": {
            "primary_usage": "signing",
            "additional_usages": [
                "adobe_authentic_documents_trust",
                "ms_document_signing",
                "document_signing"
            ]
        }       
    },
    "cs_provisioning_method": "ship_token",
    "ship_info": {
      "name": "John Doe",
      "addr1": "360 Taylor Street",
      "addr2": "Floor 74",
      "city": "Richmond",
      "state": "va",
      "zip": "69662",
      "country": "us",
      "method": "EXPEDITED"
    },
    "custom_renewal_message": "Renew me",
    "additional_emails": [
		"jill.valentine@example.com",
		"leon.kennedy@example.com"
     ],
    "order_validity": {  
        "years": 1    
    },
    "individual": {
        "first_name": "Jonh",
        "last_name": "Doe",
        "email": "g@g.com",
        "telephone": "+11234567890",
        "country": "us",
        "job_title": Analyst
    },
    "payment_method": "balance"
}
curl -X POST \
  'https://www.digicert.com/services/v2/order/certificate/ds_individual' \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
  -d '{
    "certificate": {      
        "signature_hash": "sha256",
        "usage_designation": {
            "primary_usage": "signing",
            "additional_usages": [
                "adobe_authentic_documents_trust",
                "ms_document_signing",
                "document_signing"
            ]
        }
    },
    "cs_provisioning_method": "client_app",
    "custom_renewal_message": "Renew me",
    "additional_emails": [
		"jill.valentine@example.com",
		"leon.kennedy@example.com"
     ],
    "order_validity": {  
        "years": 1    
    },
    "individual": {
        "first_name": "Jonh",
        "last_name": "Doe",  
        "email": "g@g.com",
        "telephone": "+11234567890",
        "country": "us",
        "job_title": Analyst
    },
    "payment_method": "balance",
}
curl -X POST \
  'https://www.digicert.com/services/v2/order/certificate/ds_individual' \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
  -d '{
    "certificate": {
        "csr": "-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----",
        "key_size": 2048,
        "csr_key_type": rsa,
        "signature_hash": "sha256",
        "usage_designation": {
            "primary_usage": "signing",
            "additional_usages": [
                "adobe_authentic_documents_trust",
                "ms_document_signing",
                "document_signing"
            ]
        }
    },
    "cs_provisioning_method": "email",
    "custom_renewal_message": "Renew me",
    "additional_emails": [
		"jill.valentine@example.com",
		"leon.kennedy@example.com"
     ],
    "order_validity": {  
        "years": 1    
    },
    "individual": {
        "first_name": "Jonh",
        "last_name": "Doe",
        "email": "g@g.com",
        "telephone": "+11234567890",
        "country": "us",
        "job_title": Analyst
    },
    "payment_method": "balance",
}
{
  "id": 112233,
  "requests": [
    {
      "id": 113,
      "status": "pending"
    }
  ]
}
{
  "id": 112233,
  "requests": [
    {
      "id": 113,
      "status": "submitted"
    }
  ]
}
{
  "id": 112233,
  "requests": [
    {
      "id": 113,
      "status": "approved"
    }
  ],  
  "certificate_id": 113
}
{
  "id": 112233,  
  "certificate_id": 845166333113
}

Request parameters

NameReq/OptTypeDescription
certificaterequiredobjectCertificate details.
.. server_platformoptionalobjectServer platform type.
Default:-1 (other)
.. .. idrequiredintServer platform ID. See Glossary – Server platforms.
.. ca_cert_idoptionalstringID of the intermediate certificate authority (ICA) certificate to select as the issuing certificate. To get the ca_cert_id value for an ICA, use the Product list](/certcentral-apis/services-api/products/product-list.html) endpoint.
Account administrators can customize the default and allowed ICAs for each product at the container or user role level. If you do not provide a value for this parameter, we issue the certificate using the default ICA. If you provide the ca_cert_id value for an ICA that is not allowed, the request returns an error*. To see the custom ICA settings for each product, use the
Product limits endpoint.
*This parameter is ignored if the option for ICA selection is not enabled for your account. For more information, see[Configure the ICA certificate chain feature for your public TLS certificates.
.. usage_designationrequiredobjectObject that determines the primary use (KU) and additional uses (EKU) for the certificate.
.. .. primary_usagerequiredstringPrimary use for the certificate.
Allowed values: signing
.. .. additional_usagesoptionalarrayList of additional certificate uses.
Default: document_signing
Allowed values: adobe_authentic_documents_trustsigning, ms_document_signing, or document_signing.
cs_provisioning_methodrequiredstringSpecify how you want to receive the token.
Default: email
Allowed values: email, ship_token, or client_app.
For more information about the provisioning methods, see Glossary – Provisioning methods
After placing the order, go to the Order your Document Signing for Individual certificate page in the CertCentral platform documentation, and view the What’s next subsection to carry out the subsequent tasks.
ship_infooptionalobjectFor orders with the cs_provisioning_method of ship_token, specify the shipping address for the hardware token.
.. namerequiredstringFirst and last name of the recipient of the order.
.. addr1requiredstringShipping address for the token.
.. addr2requiredstringContinuation of street address.
.. cityrequiredstringShipping city.
.. staterequiredstringShipping state.
.. ziprequiredstringShipping postal code.
.. countryrequiredstringShipping country.
.. methodrequiredstringShipping priority for the token.
Allowed values: STANDARD or EXPEDITED (incurs additional cost).
.. csrconditionalstringCertificate signing request (CSR) or public key in PEM format. Format the CSR/public key as a base64-encoded string without line breaks or escape characters. Include the PEM headers and footers (such as -----BEGIN CERTIFICATE REQUEST-----... and ...-----END CERTIFICATE REQUEST-----). For more information about generating a CSR, see Create a CSR.
Required if the cs_provisioning_method is email.
After placing the order, if the status of the order is pending, you can use the Update CSR endpoint to update the CSR. To check the status of the order, use the Order validation status endpoint.
Note: The Services API does not extract information from the CSR to fill in the details of a certificate request.
.. key_sizeoptionalintNumber of bits used in the key.
Default: 2048
Allowed values for RSA key type: 2048, 3072, or 4096.
Allowed values for ECC key type: p-256 or p-354.
.. csr_key_typeoptionalstringKey type for the CSR.
Default: RSA
Allowed values: rsa or ecc.
.. signature_hashoptionalstringHash algorithm used for signing the certificate.
Default: sha-256
Allowed values:: sha256, sha384, sha512.
commentsoptionalstringComments about the order for the administrator or approver reviewing the order request. The comments value is stored on the order request. If the order skips the approval step (skip_approval is set to true), any provided comments value is ignored since CertCentral creates the order directly without creating a corresponding request.
renewal_of_order_idoptional*intIf order is a renewal, enter the previous order’s ID.
*Renewal orders must include either a renewed_thumbprint or renewal_of_order_id value.
custom_renewal_messageoptionalstringCustom message to be included in renewal notifications.
additional_emailsoptionalarrayAdditional email addresses to receive certificate notification emails (for example, certificate issuance, duplicate certificate, and certificate renewals).
user_id_assignmentsoptionalarrayList of User IDs that can manage the order.
csa_agreed_torequiredbooleanSpecify if the Certificate Subscriber Agreement (CSA) has been agreed to. Set this parameter to true to indicate agreement and false for disagreement.
Default: true
Allowed values: true or false.
promo_codeoptionalstringPromotional code for the order.
order_validityrequiredobjectDefines the validity period of the order. For public TLS/SSL certificates, order validity determines the length of a Multi-year Plan.
.. yearsrequired*intTotal number of years the certificate and the order are valid.
*Can be replaced by order_validity.days or order_validity.custom_expiration_date.
Allowed value: 1, 2, or 3
.. daysoptionalintTotal number of days the certificate and the order are valid. Overrides order_validity.years.
Max: 1095
.. custom_expiration_dateoptionalstringCustom expiration date for the order. Overrides order_validity.days and order_validity.years.
Format: dd MMM YYYY (for example, “09 JUN 2025”)
Range: Must be within three years of the date you request the order.
individualrequiredobjectInformation about the individual who is the intended certificate holder.
.. first_namerequiredstringIndividual’s first name (given name). This can include middle names or initials, but do not include titles or prefixes such as “Dr.”.
.. last_namerequiredstringIndividual’s last name (given name). This can include middle names or initials, but do not include titles or prefixes such as “Dr.”.
.. emailrequiredstringIndividual’s email address. This email address is used for processing the order request and receiving order approval notifications. This email address does not appear on the certificate.
.. telephonerequiredstringIndividual’s phone number with the country code (for example, +1-555-555-5555).
.. countryrequiredstringIndividual’s country, represented by a two-letter country code.
.. staterequiredstringIndividual’s state or province.
.. cityoptionalstringIindividual’s city.
.. zipoptionalstringIndividual’s postal code.
payment_methodrequiredstringPayment method for the order. Allowed values:
credit_cardrequired (if payment_method is card)objectObject with information about the credit card charged for the order. Required if payment_method is card.
.. numberrequiredstringCredit card number.
.. expiration_monthrequiredstringCredit card expiration month. Format as a two-digit number between 01 (Jan) and 12 (Dec).
.. expiration_yearrequiredstringCredit card expiration year. Format as a four-digit number. For example: 2026
.. cvvrequiredstringCard verification value (CVV). Format as a three- or four-digit number. For example: 333 or 4444
.. cardholder_namerequiredstringCardholder’s first and last name.
.. save_credit_cardoptionalnullSpecify whether to save the credit card details. true for saving the details, false for not saving the details, and null for not indicating the preference.
Allowed Values: true, false, or null.
.. set_as_defaultrequiredstringSet the card as the default payment option or method. To set this card as your default payment method, use 1. To keep your default payment method, use 0.
Allowed Values: 1 or 0.
billing_addressconditionalobjectObject with information about the billing address. Required if payment_method is card.
.. addressrequiredstringBilling street address.
.. address2optionalstringContinuation of street address.
.. cityrequiredstringBilling city.
.. stateconditionalstringBilling state or province. Optional for some countries.
.. countryrequiredstringBilling country.
.. zipconditionalstringBilling zip or postal code. Optional for some countries.

Response parameters

NameTypeDescription
idintOrder ID.
organizationobjectContainer for new organization details. Only returned if a new organization was created with the order.
.. idintOrganization ID for the new organization.
requestsarrayContains information about the request.
.. idintRequest ID.
.. statusstringRequest status.
Possible values:pending, submitted, approved, rejected
certificate_idintCertificate ID. Returned if request status is approved.

After placing the order, go to the Order your Document Signing for Individual certificate page in the CertCentral platform documentation, and view the What’s next subsection to carry out the subsequent tasks.