Reissue certificate
POST https://www.digicert.com/services/v2/order/certificate/{{order_id}}/reissue
Use this endpoint to reissue a certificate. A certificate reissue replaces the existing certificate with a new one that has different information, such as a different common name, CSR, or signature hash.
Notice
When you reissue a certificate for a Multi-year Plan, you can set a new expiration date for the reissued certificate. For more information, see Multi-year plans.
Reissue Code Signing and EV Code Signing certificates
When reissuing a Code Signing or EV Code Signing certificate, you can choose a provisioning method for the reissued certificate by including the cs_provisioning_method
parameter in your request payload.
If you submit a reissue request without providing a cs_provisioning_method
value:
By default, DigiCert reissues the certificate using the current provisioning method for the order. To get the current provisioning method for an order, check the value of the
cs_provisioning_method
parameter on the Order info API response.If the provisioning method stored on the order is not currently enabled in your account preferences, DigiCert reissues the certificate using the default provisioning method from your account preferences. Then, the provisioning method stored on the order is updated to match the provisioning method used to reissue the certificate.
Example requests and responses
Request parameters
Name | Req/Opt | Type | Description |
---|---|---|---|
certificate | required | object | Details about the certificate. |
.. common_name | conditional* | string | Domain to be secured. *Note: The |
.. dns_names | optional | array | Additional domains to be secured. |
.. csr | conditional | string | Certificate signing request (CSR). Usage depends on certificate type. TLS/SSL certificate reissues: A CSR is required when reissuing TLS/SSL certificates. Code Signing and EV Code Signing certificate reissues: A CSR is required when reissuing Code Signing or EV Code Signing certificates that will be installed on HSMs ( |
.. server_platform | conditional | object | Server platform type. |
.. .. id | required | int | Server platform ID. Usage depends on certificate type. TLS/SSL certificate reissues: Providing a new Code Signing and EV Code Signing certificate reissues: For allowed values, see Glossary – Code Signing and EV Code Signing hardware platforms. Usage requirements depend on provisioning method (
|
.. cert_validity | optional | object | Defines the validity period of the reissued certificate. If not provided, the validity period for the reissued certificate defaults to the time remaining in the Multi-year Plan or the maximum certificate validity period defined by CA/B Forum baseline requirements, whichever is shorter. This object is ignored for reissues that are not associated with a Multi-year Plan. |
.. .. years | optional | int | Number of years the certificate is valid after it is issued. Can be replaced with Allowed value: |
.. .. days | optional | int | Number of days the certificate is valid after it is issued. Overrides Max: |
.. .. custom_expiration_date | optional | string | A custom expiration date for the certificate. Overrides Format: Range: Must be within 397 days of the date you request the certificate. |
.. signature_hash | required | string | Hash algorithm used to signing the certificate. |
.. profile_option | optional | string | Certificate profile option for the reissued certificate. Allowed values: See Glossary – Certificate profile options |
.. ca_cert_id | optional | string | ID of the intermediate certificate authority (ICA) certificate to select as the issuing certificate. To get the Account administrators can customize the default and allowed ICAs for each product at the container or user role level. If you do not provide a value for this parameter, we issue the certificate using the default ICA. If you provide the *This parameter is ignored if the option for ICA selection is not enabled for your account. For more information, see ICA certificate chain selection. |
dcv_method | optional | string | For TLS/SSL reissues, DCV method to use when verifying domain control. See Glossary – DCV methods. |
comments | optional | string | Comments about the reissue for the administrator reviewing the reissue request. The |
skip_approval | optional | bool | Specify if the order should skip the approval step and be immediately submitted for validation and issued when complete. Default: |
certificate_dcv_scope | optional | string | |
use_auth_key | optional | bool | Use this parameter to complete DCV checks for new domains on a DV TLS/SSL reissue using an AuthKey request token. |
cs_provisioning_method | optional | string | |
ship_info | optional | object | For Code Signing or EV Code Signing reissues with a Optional for both Code Signing and EV Code Signing certificates. For orders that omit the |
.. name | required | string | Name of the recipient. |
.. addr1 | required | string | Shipping address for the token. |
.. addr2 | optional | string | Secondary address field. |
.. city | required | string | Shipping city. |
.. state | required | string | Shipping state |
.. zip | required | string | Shipping postal code. |
.. country | required | string | Shipping country. |
.. method | required | string | Shipping priority for the token. Allowed values: |
Response parameters
Name | Type | Description |
---|---|---|
id | int | Order ID. |
certificate_id | int | Certificate ID. Only returned if |
dcv_random_value | string | Random value used for domain control validation (DCV). Use this token to complete the DCV check for any domain submitted for validation with the order. Only returned when the DCV method is |
requests | array | List of requests. |
.. id | int | Request ID. |