CertCentral event types

Certificate issued

CertCentral sends certificate issued (certificate_issued) events when DigiCert issues a certificate in your CertCentral account.

{
  "event": "certificate_issued",
  "data": {
    "order_id": 12345,
    "certificate_id": 23456
  }
}
{
  "event": "certificate_issued",
  "data": {
    "order_id": 1234,
    "certificate_id": 1234,
    "certificate_chain": [
      {
        "subject_common_name": "example.com",
        "pem": "-----BEGIN CERTIFICATE-----\r\nMII...\r\n-----END CERTIFICATE-----\r\n"
      },
      {
        "subject_common_name": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
        "pem": "-----BEGIN CERTIFICATE-----\r\nMII...\r\n-----END CERTIFICATE-----\r\n"
      },
      {
        "subject_common_name": "DigiCert Global Root G2",
        "pem": "-----BEGIN CERTIFICATE-----\r\nMII...\r\n-----END CERTIFICATE-----\r\n"
      }
    ]
  }
}
NameTypeDescription
eventstringEvent type.
dataobjectObject with event data.
.. order_idintegerID of the order associated with the event.
.. certificate_idintegerID of the certificate associated with the event.
.. certificate_chainarray of objectsFor public and private TLS/SSL certificates, you can configure certificate issued events to include the complete certificate chain. If you do, certificate_issued events return a certificate_chain array. Each object in the array has the subject_common_name and pem data for a certificate in the chain (end-entity certificate and issuing intermediate and root CA certificates).
Learn more: Customize certificate issued events
.. .. subject_common_namestringSubject common name of a certificate in the certificate chain.
.. .. pemstringPEM data for a certificate in the certificate chain. Includes escaped carriage return and newline characters at each line break (\r\n).

Certificate revoked

CertCentral sends certificate revoked (certificate_revoked) events when a certificate in your CertCentral account is revoked.

certificate_revoked event data

{
  "event": "certificate_revoked",
  "data": {
    "order_id": 12345,
    "certificate_id": 23456
  }
}
NameTypeDescription
eventstringEvent type.
dataobjectObject with event data.
.. order_idintegerID of the order associated with the event.
.. certificate_idintegerID of the certificate associated with the event.

Order rejected

CertCentral sends order rejected (order_rejected) events when an order in your CertCentral account is rejected.

order_rejected event data

{
  "event": "order_rejected",
  "data": {
    "order_id": 12345,
    "certificate_id": 23456
  }
}
NameTypeDescription
eventstringEvent type.
dataobjectObject with event data.
.. order_idintegerID of the order associated with the event.
.. certificate_idintegerID of the certificate associated with the event.

Organization validated

CertCentral sends organization validated (organization_validated) events when the validation process is completed for an organization in your CertCentral account.

organization_validated

{
  "event": "organization_validated",
  "data": {
    "organization_id": 12345,
    "validated_until": "2024-08-10",
    "validation_type": "OV"
  }
}
NameTypeDescription
eventstringEvent type.
dataobjectObject with event data.
.. organization_idintegerID of the organization associated with the event.
.. validated_untilstringDate validation expires for the given organization. Format: YYYY-MM-DD
.. validation_typestringValidation type associated with the event.
Possible values:

Organization expired/organization revalidation notice

There are two CertCentral webhook events that notify you when validation (OV, EV, code signing, or EV code signing) for an organization is about to expire:

  • Organization expired (organization_expired)
  • Organization revalidation notice (organization_revalidation_notice)

Both organization_expired and organization_revalidation_notice events are triggered relative to the expiration date of the given validation type. The only difference in behavior between these two events is the name CertCentral sends in the event field.

{
  "event": "organization_expired",
  "data": {
    "organization_id": 12345,
    "validated_until": "2024-08-10",
    "validation_type": "OV"
  }
}
{
  "event": "organization_revalidation_notice",
  "data": {
    "organization_id": 12345,
    "validated_until": "2024-08-10",
    "validation_type": "OV"
  }
}
NameTypeDescription
eventstringEvent type.
dataobjectObject with event data.
.. organization_idintegerID of the organization associated with the event.
.. validated_untilstringDate validation expires for the given organization. Format: YYYY-MM-DD
.. validation_typestringValidation type associated with the event.
Possible values:

Domain validated

CertCentral sends domain validated (domain_validated) events when domain control validation is completed for a domain in your CertCentral account.

domain_validated

{
  "event": "domain_validated",
  "data": {
    "domain_id": 12345,
    "validated_until": "2024-08-10T12:45:02-06:00"
  }
}
NameTypeDescription
eventstringEvent type.
dataobjectObject with event data.
.. domain_idintegerID of the domain associated with the event.
.. validated_untilstringDate and time validation expires for the given domain or organization. ISO 8601 format.

Domain expired/domain revalidation notice

There are two CertCentral webhook events that notify you when domain control validation (DCV) for a domain is about to expire:

  • Domain expired (domain_expired)
  • Domain revalidation notice (domain_revalidation_notice)

Both domain_expired and domain_revalidation_notice events are triggered relative to the expiration date of the given domain’s validation. The only difference in behavior between these two events is the name CertCentral sends in the event field.

{
  "event": "domain_expired",
  "data": {
    "domain_id": 12345,
    "validated_until": "2024-08-10T12:45:02-06:00"
  }
}
{
  "event": "domain_revalidation_notice",
  "data": {
    "domain_id": 12345,
    "validated_until": "2024-08-10T12:45:02-06:00"
  }
}
NameTypeDescription
eventstringEvent type.
dataobjectObject with event data.
.. domain_idintegerID of the domain associated with the event.
.. validated_untilstringDate and time validation expires for the given domain or organization. ISO 8601 format.