# DigiCert developer portal
> DigiCert developer documentation resources
> Last updated: 2026-07-21

## About this site
This site documents DigiCert's REST APIs for certificate lifecycle management, code signing, document signing, IoT device security, and account management. All APIs use HTTPS and authenticate via API keys or OAuth tokens. Base URLs vary by product and are documented in each API section.

## Account and platform
### Get started
Learn the API basics for authentication, base URLs, request patterns, and example calls.
- [Overview](https://dev.digicert.com/md/get-started.md): Learn the basics of DigiCert APIs and developer integration.
- [Authentication](https://dev.digicert.com/md/get-started/authentication.md): Learn how service users authenticate API requests with tokens or client certificates.
- [Environments & base URLs](https://dev.digicert.com/md/get-started/environments-base-urls.md): Choose the right environment, regional hostname, and base URL pattern for API requests.
- [Make your first API call](https://dev.digicert.com/md/get-started/make-your-first-api-call.md): Create credentials, send a test request, and explore common GET request patterns.
- [Error handling & rate limits](https://dev.digicert.com/md/get-started/error-handling-rate-limits.md): Learn how to parse API errors, handle status codes, and implement retry logic.
- [About the APIs](https://dev.digicert.com/md/get-started/about-the-apis.md): Review available API families, common platform patterns, and when to use each API.
### Account Manager API
DigiCert® Account Manager API lets you automate user management, control access, manage credentials, and monitor activity for your DigiCert® account. What you can do Manage users: Create and manage …
- [Overview](https://dev.digicert.com/md/account-manager-api.md): Manage accounts, divisions, users, and organization settings.
#### Tutorials
- [Create and authenticate a service user](https://dev.digicert.com/md/account-manager-api/tutorials/create-and-authenticate-a-service-user.md): Create a service user, assign account roles and permissions, and authenticate API calls for secure automation.

- [Set up service user multi-factor authentication](https://dev.digicert.com/md/account-manager-api/tutorials/set-up-service-user-multi-factor-authentication.md): Configure mTLS client authentication certificates for secure access, certificate management, signing, and audit logs.

- [Audit API activity for compliance reporting](https://dev.digicert.com/md/account-manager-api/tutorials/audit-api-activity-for-compliance-reporting.md): Use audit logs API to query account activity, filter events, paginate results, and support compliance reporting.

- [Manage API token lifecycle](https://dev.digicert.com/md/account-manager-api/tutorials/manage-api-token-lifecycle.md): Create, rotate, disable, and delete API tokens while maintaining secure, zero-downtime integrations.

- [API reference](https://dev.digicert.com/md/account-manager-api/api-reference.md): OpenAPI reference documentation for Account Manager
### DigiCert Account API
- [Overview](https://dev.digicert.com/md/digicert-account-api.md): Integrate authentication and single sign-on.
- [API reference](https://dev.digicert.com/md/digicert-account-api/api-reference.md): OpenAPI reference documentation for DigiCert® Account
## Certificates and PKI
### DigiCert Public CA API (CertCentral)
Welcome to the DigiCert CertCentral® API documentation! This documentation assumes you have some experience working with APIs. If you’ve never worked with an API before, we recommend learning about …
- [Overview](https://dev.digicert.com/md/certcentral-apis.md): Public certificate ordering, issuance, renewal, and revocation.
#### Services API
The DigiCert Services API is a powerful API that allows you to automate typical certificate processes to save time and streamline certificate management. The Services API uses modern RESTful …
- [Rate limits](https://dev.digicert.com/md/certcentral-apis/services-api/rate-limits.md): DigiCert APIs enforce a rate limit of 1000 requests per 3 minutes, along with a short-term rate limit of 100 requests per 5 seconds to protect against burst …
- [Best practices](https://dev.digicert.com/md/certcentral-apis/services-api/best-practices.md): Recommendations for using CertCentral Services API keys, request patterns, and certificate order workflows.
- [Structures](https://dev.digicert.com/md/certcentral-apis/services-api/structures.md): Access key object The access key object contains information about an API key or ACME URL. Name Type Description id integer Key ID. user object Details about …
- [Glossary](https://dev.digicert.com/md/certcentral-apis/services-api/glossary.md): Definitions for CertCentral Services API roles, certificate formats, status values, and product identifiers.
- [Errors](https://dev.digicert.com/md/certcentral-apis/services-api/errors.md): Errors return both an HTTP status code and an error message. Errors caused by the client return a 4xx Client Error status code. Errors caused by the API service …
- [File-based domain control validation (http-token)](https://dev.digicert.com/md/certcentral-apis/services-api/file-based-domain-control-validation-http-token.md): This article describes how the CertCentral Services API handles requests to validate domains submitted with a domain control validation (DCV) method of …
##### Workflows
- [OV/EV certificate lifecycle](https://dev.digicert.com/md/certcentral-apis/services-api/workflows/ov-ev-certificate-lifecycle.md): The OV/EV certificate lifecycle consists of these main steps: Prepare certificate request Submit certificate order (Optional) Cancel certificate order Complete …
- [OV/EV certificate immediate issuance](https://dev.digicert.com/md/certcentral-apis/services-api/workflows/ov-ev-certificate-immediate-issuance.md):  This workflow guide is only for OV/EV certificate orders. To used immediate certificate issuance for DV orders, see DV certificate immediate issuance. When …
- [DV certificate lifecycle](https://dev.digicert.com/md/certcentral-apis/services-api/workflows/dv-certificate-lifecycle.md): The DV certificate lifecycle consists of these main steps: Prepare DV certificate request Submit DV certificate order (Optional) Cancel certificate order …
- [DV certificate immediate issuance](https://dev.digicert.com/md/certcentral-apis/services-api/workflows/dv-certificate-immediate-issuance.md): When using the API to order your DV certificates, too often time is spent just waiting for the certificate to be issued. By following the steps in this workflow …
- [Verified Mark Certificate or Common Mark Certificate lifecycle](https://dev.digicert.com/md/certcentral-apis/services-api/workflows/verified-mark-certificate-or-common-mark-certificate-lifecycle.md): The lifecycle of a Verified Mark Certificate (VMC) or a Common Mark Certificate (CMC) consists of these main steps: Prepare certificate request Submit …
##### Account
- [GET /services/v2/account](https://dev.digicert.com/md/certcentral-apis/services-api/account/account-details.md): Account details
- [POST /services/v2/account/metadata](https://dev.digicert.com/md/certcentral-apis/services-api/account/add-custom-field.md): Add custom field
- [GET /services/v2/account/auth-key](https://dev.digicert.com/md/certcentral-apis/services-api/account/authkey-details.md): AuthKey details
- [GET /services/v2/account/auth-keys](https://dev.digicert.com/md/certcentral-apis/services-api/account/list-authkeys.md): List AuthKeys
- [POST /services/v2/account/metadata/bulk](https://dev.digicert.com/md/certcentral-apis/services-api/account/bulk-add-fields.md): Bulk add fields
- [POST /services/v2/account/move-orders/<target_account_id>](https://dev.digicert.com/md/certcentral-apis/services-api/account/move-order.md): Move orders
- [GET /services/v2/account/contract](https://dev.digicert.com/md/certcentral-apis/services-api/account/contract-details.md): Contract details
- [POST /services/v2/account/auth-key](https://dev.digicert.com/md/certcentral-apis/services-api/account/create-authkey.md): Create AuthKey
- [DELETE /services/v2/account/auth-key](https://dev.digicert.com/md/certcentral-apis/services-api/account/delete-authkey.md): Delete AuthKey
- [DELETE /services/v2/account/metadata/{{metadata_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/account/delete-custom-field.md): Delete custom field
- [PUT /services/v2/account/metadata/{{metadata_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/account/edit-custom-field.md): Edit custom field
- [GET /services/v2/account/subaccount/{{invite_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/account/invite-details.md): Invite details
- [GET /services/v2/account/metadata](https://dev.digicert.com/md/certcentral-apis/services-api/account/list-custom-fields.md): List custom fields
- [GET /services/v2/account/subaccount/invite](https://dev.digicert.com/md/certcentral-apis/services-api/account/list-invites.md): List invites
- [PUT /services/v2/account/subaccount/invite/{{invite_id}}/send](https://dev.digicert.com/md/certcentral-apis/services-api/account/resend-invite.md): Resend invite
- [GET /services/v2/account/saml-entity](https://dev.digicert.com/md/certcentral-apis/services-api/account/saml-entity-details.md): SAML entity details
- [POST /services/v2/account/subaccount/invite](https://dev.digicert.com/md/certcentral-apis/services-api/account/send-invite.md): Send invite
- [PUT /services/v2/account](https://dev.digicert.com/md/certcentral-apis/services-api/account/update-account-emails.md): Update account emails
- [PUT /services/v2/account/settings](https://dev.digicert.com/md/certcentral-apis/services-api/account/update-account-notification-settings.md): Update account notification settings
- [PUT /services/v2/account/subaccount/invite/{{invite_id}}/status](https://dev.digicert.com/md/certcentral-apis/services-api/account/update-invite-status.md): Update invite status
- [PUT /services/v2/account/saml-entity/{{entity_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/account/update-saml-entity.md): Update SAML entity
- [GET /services/v2/account/guest-access](https://dev.digicert.com/md/certcentral-apis/services-api/account/guest-access-url.md): Guest access URL
- [POST /services/v2/sso/oidc/entity](https://dev.digicert.com/md/certcentral-apis/services-api/account/configure-oidc-sso.md): Configure OIDC SSO
- [PUT /services/v2/sso/oidc/entity](https://dev.digicert.com/md/certcentral-apis/services-api/account/update-oidc-sso-configuration.md): Update OIDC SSO configuration
- [DELETE /services/v2/sso/oidc/entity](https://dev.digicert.com/md/certcentral-apis/services-api/account/delete-oidc-sso-configuration.md): Delete OIDC SSO configuration
- [GET /services/v2/sso/oidc/entity](https://dev.digicert.com/md/certcentral-apis/services-api/account/oidc-sso-configuration-details.md): OIDC SSO configuration details
##### API keys
- [GET /services/v2/key](https://dev.digicert.com/md/certcentral-apis/services-api/api-keys/list-keys.md): List keys
- [GET /services/v2/key/api-roles](https://dev.digicert.com/md/certcentral-apis/services-api/api-keys/list-api-access-roles.md): List API access roles
- [POST /services/v2/key/user/{{user_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/api-keys/create-key.md): Create key
- [GET /services/v2/key/{{key_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/api-keys/get-key-info.md): Get key info
- [PUT /services/v2/key/{{key_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/api-keys/edit-key.md): Edit key
- [PUT /services/v2/key/{{key_id}}/status](https://dev.digicert.com/md/certcentral-apis/services-api/api-keys/update-key-status.md): Update key status
- [POST /services/v2/key/acme-eab/tlm](https://dev.digicert.com/md/certcentral-apis/services-api/api-keys/acme-external-account-binding-new.md): ACME External Account Binding new
- [POST /services/v2/key/acme-eab](https://dev.digicert.com/md/certcentral-apis/services-api/api-keys/acme-external-account-binding.md): ACME External Account Binding
##### Authorization
- [GET /services/v2/authorization](https://dev.digicert.com/md/certcentral-apis/services-api/authorization/list-permissions.md): List permissions
- [GET /services/v2/authorization/view_orders](https://dev.digicert.com/md/certcentral-apis/services-api/authorization/check-permission.md): Check permission
- [GET /services/v2/authorization/{{permission}}/container](https://dev.digicert.com/md/certcentral-apis/services-api/authorization/container-permissions.md): Container permissions
##### Certificates
- [GET /services/v2/certificate/{{certificate_id}}/download/platform](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/download-certificate.md): Download certificate
- [GET /services/v2/certificate/{{certificate_id}}/download/format/{{format_type}}](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/download-certificate-by-format.md): Download certificate by format
- [GET /services/v2/certificate/download/order/{{order_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/download-certificate-order_id.md): Download certificate (order_id)
- [GET /services/v2/certificate/download/order/{{order_id}}/format/{{format_type}}](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/download-certificate-by-format-order_id.md): Download certificate by format (order_id)
- [GET /services/v2/certificate/{{certificate_id}}/chain](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/certificate-chain.md): Certificate chain
- [GET /services/v2/certificate/intermediates](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/list-intermediates.md): List intermediates
- [GET /services/v2/certificate/{{certificate_id}}/note](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/list-certificate-notes.md): List certificate notes
- [POST /services/v2/certificate/{{certificate_id}}/note](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/add-note.md): Add note
- [PUT /services/v2/certificate/{{certificate_identifier}}/revoke](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/revoke-certificate.md): Revoke certificate
- [PUT /services/v2/certificate/{{certificate_id}}/sendemail](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/email-certificate.md): Email certificate
- [PUT /services/v2/certificate/{{certificate_id}}/archive](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/archive-certificate.md): Archive certificate
- [PUT /services/v2/certificate/{{certificate_id}}/unarchive](https://dev.digicert.com/md/certcentral-apis/services-api/certificates/restore-certificate.md): Restore certificate
##### Containers
- [GET /services/v2/container](https://dev.digicert.com/md/certcentral-apis/services-api/containers/list-containers.md): List containers
- [GET /services/v2/container/{{container_id}}/template](https://dev.digicert.com/md/certcentral-apis/services-api/containers/list-templates.md): List templates
- [POST /services/v2/container/{{container_id}}/children](https://dev.digicert.com/md/certcentral-apis/services-api/containers/create-container.md): Create container
- [GET /services/v2/container/{{container_id}}/template/{{template_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/containers/template-info.md): Template info
- [GET /services/v2/container/{{container_id}}/role](https://dev.digicert.com/md/certcentral-apis/services-api/containers/list-container-roles.md): List container roles
- [GET /services/v2/container/{{container_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/containers/container-info.md): Container info
- [PUT /services/v2/container/{{container_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/containers/edit-container.md): Edit container
- [GET /services/v2/container/{{container_id}}/children](https://dev.digicert.com/md/certcentral-apis/services-api/containers/list-child-containers.md): List child containers
- [GET /services/v2/container/{{container_id}}/parent](https://dev.digicert.com/md/certcentral-apis/services-api/containers/parent-container-info.md): Parent container info
- [GET /services/v2/container/{{container_id}}/order/organization](https://dev.digicert.com/md/certcentral-apis/services-api/containers/list-container-organizations.md): List container organizations
- [PUT /services/v2/container/{{container_id}}/user-assignments](https://dev.digicert.com/md/certcentral-apis/services-api/containers/update-user-assignments.md): Update user assignments
- [PUT /services/v2/container/{{container_id}}/organization-assignments](https://dev.digicert.com/md/certcentral-apis/services-api/containers/update-organization-assignments.md): Update organization assignments
- [PUT /services/v2/container/{{container_id}}/allowed-domain-names](https://dev.digicert.com/md/certcentral-apis/services-api/containers/update-allowed-domains.md): Update allowed domains
- [GET /services/v2/container/{{container-id}}/product-limits](https://dev.digicert.com/md/certcentral-apis/services-api/containers/product-limits.md): Product limits
- [PUT /services/v2/container/{{container_id}}/activate](https://dev.digicert.com/md/certcentral-apis/services-api/containers/activate-container.md): Activate container
- [PUT /services/v2/container/{{container_id}}/deactivate](https://dev.digicert.com/md/certcentral-apis/services-api/containers/deactivate-container.md): Deactivate container
##### CT log monitoring
- [PUT /services/v2/ctmonitor/{{order_id}}/enable](https://dev.digicert.com/md/certcentral-apis/services-api/ct-log-monitoring/enable-ct-log-monitoring.md): Enable CT log monitoring
- [PUT /services/v2/ctmonitor/{{order_id}}/disable](https://dev.digicert.com/md/certcentral-apis/services-api/ct-log-monitoring/disable-ct-log-monitoring.md): Disable CT log monitoring
- [GET /services/v2/ctmonitor/{{order_id}}/details](https://dev.digicert.com/md/certcentral-apis/services-api/ct-log-monitoring/get-ct-logs-order-id.md): Get CT logs (order ID)
- [GET /services/v2/ctmonitor/{{order_id}}/cert-details/{{certificate_serial_number}}](https://dev.digicert.com/md/certcentral-apis/services-api/ct-log-monitoring/get-ct-log-details-for-a-certificate.md): Get CT log details for a certificate
- [GET /services/v2/ctmonitor/issuer-brand-settings](https://dev.digicert.com/md/certcentral-apis/services-api/ct-log-monitoring/get-allowlisted-issuing-ca-brand-details.md): Get allowlisted issuing CA brand details
- [GET /services/v2/ctmonitor/{{order_id}}/ct-cert/{{serial_id}}/](https://dev.digicert.com/md/certcentral-apis/services-api/ct-log-monitoring/download-certificate-serial-number.md): Download certificate (serial number)
- [PUT /services/v2/ctmonitor/issuer-brand-settings](https://dev.digicert.com/md/certcentral-apis/services-api/ct-log-monitoring/allowlist-issuing-certificate-authority.md): Allowlist issuing certificate authority
- [GET /services/v2/ctmonitor/{{order_id}}/status](https://dev.digicert.com/md/certcentral-apis/services-api/ct-log-monitoring/get-ct-log-monitoring-status.md): Get CT log monitoring status
##### Domains
- [GET /services/v2/domain](https://dev.digicert.com/md/certcentral-apis/services-api/domains/list-domains.md): List domains
- [POST /services/v2/domain](https://dev.digicert.com/md/certcentral-apis/services-api/domains/add-domain.md): Add domain
- [DELETE /services/v2/domain/{{domain_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/domains/delete-domain.md): Delete domain
- [PUT /services/v2/domain/{{domain_id}}/deactivate](https://dev.digicert.com/md/certcentral-apis/services-api/domains/deactivate-domain.md): Deactivate domain
- [PUT /services/v2/domain/{{domain_id}}/activate](https://dev.digicert.com/md/certcentral-apis/services-api/domains/activate-domain.md): Activate domain
- [GET /services/v2/domain/{{domain_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/domains/domain-info.md): Domain info
- [GET /services/v2/domain/validation-type](https://dev.digicert.com/md/certcentral-apis/services-api/domains/validation-types.md): Validation types
- [POST /services/v2/domain/{{domain_id}}/validation](https://dev.digicert.com/md/certcentral-apis/services-api/domains/submit-for-validation.md): Submit for validation
- [GET /services/v2/domain/{{domain_id}}/validation](https://dev.digicert.com/md/certcentral-apis/services-api/domains/validation-details.md): Validation details
- [GET /services/v2/domain/dcv/method](https://dev.digicert.com/md/certcentral-apis/services-api/domains/list-dcv-methods.md): List DCV methods
- [PUT /services/v2/domain/{{domain_id}}/dcv/validate-token](https://dev.digicert.com/md/certcentral-apis/services-api/domains/ov-ev-ssl-check-dcv.md): OV/EV SSL: Check DCV
- [PUT /services/v2/domain/{{domain_id}}/dcv/method](https://dev.digicert.com/md/certcentral-apis/services-api/domains/change-dcv-method.md): Change DCV method
- [GET /services/v2/domain/{{domain_id}}/dcv/emails](https://dev.digicert.com/md/certcentral-apis/services-api/domains/domain-emails.md): Domain emails
- [PUT /services/v2/domain/{{domain_id}}/dcv/emails](https://dev.digicert.com/md/certcentral-apis/services-api/domains/resend-dcv-email.md): Resend DCV email
- [POST /services/v2/domain/{{domain_id}}/dcv/token](https://dev.digicert.com/md/certcentral-apis/services-api/domains/ov-ev-ssl-generate-dcv-token.md): OV/EV SSL: Generate DCV token
- [GET /services/v2/domain/expiration-count](https://dev.digicert.com/md/certcentral-apis/services-api/domains/expiring-domains-count.md): Expiring domains count
- [PUT /services/v2/domain/{{domain_id}}/activate-domain-locking](https://dev.digicert.com/md/certcentral-apis/services-api/domains/activate-domain-locking.md): Activate domain locking
- [PUT /services/v2/domain/{{domain_id}}/deactivate-domain-locking](https://dev.digicert.com/md/certcentral-apis/services-api/domains/deactivate-domain-locking.md): Deactivate domain locking
- [PUT /services/v2/domain/{{domain_id}}/caa](https://dev.digicert.com/md/certcentral-apis/services-api/domains/check-caa-domain-lock.md): Check CAA (domain lock)
##### Finance
- [GET /services/v2/finance/balance](https://dev.digicert.com/md/certcentral-apis/services-api/finance/view-balance.md): View balance
- [GET /services/v2/finance/balance-history](https://dev.digicert.com/md/certcentral-apis/services-api/finance/list-balance-history.md): List balance history
- [GET /services/v2/finance/purchase-history](https://dev.digicert.com/md/certcentral-apis/services-api/finance/list-purchase-history.md): List purchase history
- [GET /services/v2/finance/receipt/{{receipt_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/finance/receipt-info.md): Receipt info
- [POST /services/v2/finance/transfer](https://dev.digicert.com/md/certcentral-apis/services-api/finance/transfer-funds.md): Transfer funds
- [POST /services/v2/finance/order-pricing](https://dev.digicert.com/md/certcentral-apis/services-api/finance/price-estimate.md): Price estimate
- [POST /services/v2/competitive-replacement/certificates](https://dev.digicert.com/md/certcentral-apis/services-api/finance/list-replacement-benefits.md): List replacement benefits
- [POST /services/v2/finance/voucher-pricing](https://dev.digicert.com/md/certcentral-apis/services-api/finance/voucher-price-estimate.md): Voucher price estimate
##### IP restrictions
- [POST /services/v2/container/{{container_id}}/ip/rules](https://dev.digicert.com/md/certcentral-apis/services-api/ip-restrictions/add-ip-restriction.md): Add IP restriction
- [DELETE /services/v2/container/{{container_id}}/ip/rule/{{rule_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/ip-restrictions/delete-ip-restriction.md): Delete IP restriction
- [GET /services/v2/container/{{container_id}}/ip/rules](https://dev.digicert.com/md/certcentral-apis/services-api/ip-restrictions/list-ip-restrictions.md): List IP restrictions
##### Legacy migration
- [GET /services/v2/oem-migration/{{legacy_order_id}}/order-id](https://dev.digicert.com/md/certcentral-apis/services-api/legacy-migration/digicert-order-id.md): DigiCert order ID
##### Orders
- [POST /services/v2/order/certificate/ssl_basic](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-basic-ov.md): Order Basic OV
- [POST /services/v2/order/certificate/ssl_ev_basic](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-basic-ev.md): Order Basic EV
- [POST /services/v2/order/certificate/ssl_securesite_flex](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-secure-site-ov.md): Order Secure Site OV
- [POST /services/v2/order/certificate/ssl_ev_securesite_flex](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-secure-site-ev.md): Order Secure Site EV
- [POST /services/v2/order/certificate/{{ssl_certificate_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-secure-site-ssl.md): Order Secure Site SSL
- [POST /services/v2/order/certificate/ssl_securesite_pro](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-secure-site-pro-ssl.md): Order Secure Site Pro SSL
- [POST /services/v2/order/certificate/{{ssl_certificate_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-ov-ev-ssl.md): Order OV/EV SSL
- [POST /services/v2/order/certificate/ssl_ev_securesite_pro](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-secure-site-pro-ev-ssl.md): Order Secure Site Pro EV SSL
- [POST /services/v2/order/certificate/{{private_ssl_certificate_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-private-ssl.md): Order Private SSL
- [POST /services/v2/order/certificate/ssl_dv_geotrust_flex](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-geotrust-dv-ssl.md): Order GeoTrust DV SSL
- [POST /services/v2/order/certificate/{{dv_ssl_certificate_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-dv-ssl.md): Order DV SSL
- [POST /services/v2/order/certificate/ssl_ev_basic](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-multi-year-plan.md): Order Multi-year Plan
- [POST /services/v2/order/certificate/ssl](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-ssl-type_hint.md): Order SSL (type_hint)
- [POST /services/v2/order/certificate/{{client_certificate_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-client-certificate.md): Order client certificate
- [POST /services/v2/order/certificate/secure_email_mailbox](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-secure-email-certificate.md): Order secure email certificate
- [Services API updates for client certificate workflows](https://dev.digicert.com/md/certcentral-apis/services-api/orders/services-api-updates-for-client-certificate-workflows.md): On August 29, 2023, at 10:00 MDT (16:00 UTC), CertCentral will make changes to the S/MIME certificate issuance process to align with the new Baseline …
- [POST /services/v2/order/certificate/{{code_signing_certificate_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-code-signing-certificate.md): Order code signing certificate
- [October 19, 2022: Code Signing and EV Code Signing verified contact updates](https://dev.digicert.com/md/certcentral-apis/services-api/orders/october-19-2022-code-signing-and-ev-code-signing-verified-contact-updates.md):  Update: This API change was originally scheduled for October 19, 2022. It has been postponed until December 6, 2022. DigiCert continues to recommend you follow …
- [POST /services/v2/order/certificate/{{document_certificate_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-document-signing-certificate.md): Order document signing certificate
- [POST /services/v2/order/certificate/aatl_np](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-aatl-natural-person-certificate.md): Order AATL Natural Person Certificate
- [POST /services/v2/order/certificate/ds_individual](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-document-signing-for-individual.md): Order Document Signing for Individual
- [POST /services/v2/order/certificate/ds_org_individual](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-document-signing-for-employee.md): Order Document Signing for Employee
- [POST /services/v2/order/certificate/ds_org](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-document-signing-for-organization.md): Order Document Signing for Organization
- [POST /services/v2/order/certificate/vmc_basic](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-verified-mark-certificate-vmc.md): Order Verified Mark Certificate (VMC)
- [POST /services/v2/order/certificate/mark_certificate](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-common-mark-certificate-cmc.md): Order Common Mark Certificate (CMC)
- [POST /services/v2/order/certificate/eu_qwac](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-eu-qualified-website-authentication-certificate.md): Order EU Qualified Website Authentication Certificate
- [POST /services/v2/order/certificate/eu_qwac_psd2](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-eu-qualified-website-authentication-psd2-certificate.md): Order EU Qualified Website Authentication PSD2 Certificate
- [POST /services/v2/order/certificate/aatl_org](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-aatl-organization-eseal.md): Order AATL Organization eseal Certificate
- [POST /services/v2/order/certificate/eu_eseal](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-eu-qualified-eseal.md): Order EU Qualified eSeal
- [POST /services/v2/order/certificate/eu_eseal_psd2](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-eu-qualified-eseal-psd2.md): Order EU Qualified eSeal PSD2
- [POST /services/v2/order/certificate/eu_individual](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-eu-qualified-personal.md): Order EU Qualified Personal
- [POST /services/v2/order/certificate/aatl_npo](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-aatl-natural-person-organisation.md): Order AATL Natural Person in Organisation Certificate
- [POST /services/v2/order/certificate/eu_individual_org](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-eu-qualified-personal-organisation.md): Order EU Qualified Personal Organisation
- [POST /services/v2/order/certificate/pkio_qualified_burger](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-citizen-signing.md): Order PKIo Citizen - Signing
- [POST /services/v2/order/certificate/pkio_qualified_organisation_person](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-personal-organisation-signing.md): Order PKIo Personal Organisation - Signing
- [POST /services/v2/order/certificate/pkio_qualified_organisation_person_prof](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-professional-signing.md): Order PKIo Professional - Signing
- [POST /services/v2/order/certificate/pkio_qualified_private_person](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-private-person-signing.md): Order PKIo Private Person - Signing
- [POST /services/v2/order/certificate/pkio_qualified_private_person](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-private-professional-signing.md): Order PKIo Private Professional - Signing
- [POST /services/v2/order/certificate/pkio_qualified_organisation_services](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-qualified-eseal.md): Order PKIo Qualified eSeal
- [POST /services/v2/order/certificate/pkio_private_services_server](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-private-services-server.md): Order PKIo Private Services Server
- [POST /services/v2/order/certificate/pkio_organisation_person_prof](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-authentication-or-encryption-professional.md): Order PKIo Authentication or Encryption - Professional
- [POST /services/v2/order/certificate/pkio_organisation_person](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-authentication-or-encryption-organisation-person.md): Order PKIo Authentication or Encryption - Organisation Person
- [POST /services/v2/order/certificate/pkio_organisation_services](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-authentication-or-encryption-organisation-services.md): Order PKIo Authentication or Encryption - Organisation Services
- [POST /services/v2/order/certificate/pkio_burger](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-authentication-or-encryption-citizen.md): Order PKIo Authentication or Encryption - Citizen
- [POST /services/v2/order/certificate/pkio_private_person](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-authentication-or-encryption-private-person.md): Order PKIo Authentication or Encryption - Private Person
- [POST /services/v2/order/certificate/pkio_private_person_prof](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-pkio-authentication-or-encryption-private-professional.md): Order PKIo Authentication or Encryption - Private Professional
- [POST /services/v2/order/certificate/swiss_qualified_individual](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-swiss-qualified-certificate-for-individual.md): Order Swiss Qualified Certificate for Individual
- [POST /services/v2/order/certificate/swiss_qualified_individual_organisation](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-swiss-qualified-certificate-for-individual-in-organisation.md): Order Swiss Qualified Certificate for Individual in Organisation
- [POST /services/v2/order/certificate/swiss_regulated_individual](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-swiss-regulated-certificate-for-individual.md): Order Swiss Regulated Certificate for Individual
- [POST /services/v2/order/certificate/swiss_regulated_individual_organisation](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-swiss-regulated-certificate-for-individual-in-organisation.md): Order Swiss Regulated Certificate for Individual in Organisation
- [POST /services/v2/order/certificate/swiss_regulated_organisation](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-swiss-regulated-certificate-for-organisation.md): Order Swiss Regulated Certificate for Organisation
- [POST /services/v2/order/certificate/x9_pki](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-x9-pki-for-tls.md): Order X9 PKI for TLS
- [GET /services/v2/order/certificate](https://dev.digicert.com/md/certcentral-apis/services-api/orders/list-orders.md): List orders
- [GET /services/v2/order/alternate/{{alternative_order_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/get-orders-by-alternative-order-id.md): Get orders by alternative order ID
- [GET /services/v2/order/certificate/{{order_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/order-info.md): Order info
- [GET /services/v2/order/certificate/{{order_id}}/reissue](https://dev.digicert.com/md/certcentral-apis/services-api/orders/list-reissues.md): List reissues
- [GET /services/v2/order/certificate/{{order_id}}/duplicate](https://dev.digicert.com/md/certcentral-apis/services-api/orders/list-duplicates.md): List duplicates
- [GET /services/v2/order/certificate/{{order_id}}/note](https://dev.digicert.com/md/certcentral-apis/services-api/orders/list-order-notes.md): List order notes
- [POST /services/v2/order/certificate/{{order_id}}/note](https://dev.digicert.com/md/certcentral-apis/services-api/orders/add-note.md): Add note
- [GET /services/v2/order/certificate/{{order_id}}/note/{{note_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/view-note.md): View note
- [PUT /services/v2/order/certificate/{{order_id}}/note/{{note_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/edit-note.md): Edit note
- [DELETE /services/v2/order/certificate/{{order_id}}/note/{{note_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/delete-note.md): Delete note
- [PUT /services/v2/order/certificate/{{order_id}}/additional-emails](https://dev.digicert.com/md/certcentral-apis/services-api/orders/additional-emails.md): Additional emails
- [DELETE /services/v2/order/certificate/{{order_id}}/note/{{note_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/delete-order.md): Delete order
- [POST /services/v2/order/certificate/{{order_id}}/csr](https://dev.digicert.com/md/certcentral-apis/services-api/orders/update-csr.md): Update CSR
- [PUT /services/v2/order/certificate/{{order_id}}/ct-status](https://dev.digicert.com/md/certcentral-apis/services-api/orders/change-ct-status.md): Change CT status
- [POST /services/v2/order/certificate/{{order_id}}/custom-field](https://dev.digicert.com/md/certcentral-apis/services-api/orders/edit-custom-field-value.md): Edit custom field value
- [DELETE /services/v2/order/certificate/{{order_id}}/custom-field/{{metadata_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/delete-custom-field.md): Delete custom field
- [PUT /services/v2/order/certificate/{{order_id}}/revoke](https://dev.digicert.com/md/certcentral-apis/services-api/orders/revoke-order-certificates.md): Revoke order certificates
- [GET /services/v2/order/certificate/status-changes](https://dev.digicert.com/md/certcentral-apis/services-api/orders/status-change-list.md): Status change list
- [GET /services/v2/order/certificate/{{order_id}}/validation](https://dev.digicert.com/md/certcentral-apis/services-api/orders/validation-status.md): Order validation status
- [PUT /services/v2/order/certificate/{{order_id}}/custom-renewal-message](https://dev.digicert.com/md/certcentral-apis/services-api/orders/update-renewal-message.md): Update renewal message
- [DELETE /services/v2/order/certificate/{{order_id}}/custom-renewal-message](https://dev.digicert.com/md/certcentral-apis/services-api/orders/delete-renewal-message.md): Delete renewal message
- [POST /services/v2/order/certificate/{{order_id}}/duplicate](https://dev.digicert.com/md/certcentral-apis/services-api/orders/duplicate-certificate.md): Duplicate certificate
- [POST /services/v2/order/certificate/{{order_id}}/reissue](https://dev.digicert.com/md/certcentral-apis/services-api/orders/reissue-certificate.md): Reissue certificate
- [GET /services/v2/order/certificate/{{order_id}}/site-seal](https://dev.digicert.com/md/certcentral-apis/services-api/orders/site-seal-settings.md): Site seal settings
- [POST /services/v2/order/certificate/{{order_id}}/site-seal/email-seal](https://dev.digicert.com/md/certcentral-apis/services-api/orders/email-site-seal.md): Email site seal
- [PUT /services/v2/order/certificate/123456789/site-seal](https://dev.digicert.com/md/certcentral-apis/services-api/orders/update-site-seal-settings.md): Update site seal settings
- [POST /services/v2/order/certificate/123456789/site-seal/logo](https://dev.digicert.com/md/certcentral-apis/services-api/orders/upload-site-seal-logo.md): Upload site seal logo
- [PUT /services/v2/order/certificate/{{order_id}}/status](https://dev.digicert.com/md/certcentral-apis/services-api/orders/update-order-status.md): Update order status
- [PUT /services/v2/order/certificate/{{order_id}}/move-to-container/{{container_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/change-order-container.md): Change order container
- [PUT /services/v2/order/certificate/{{order_id}}/dcv-method](https://dev.digicert.com/md/certcentral-apis/services-api/orders/dv-ssl-change-dcv-method.md): DV SSL: Change DCV method
- [PUT /services/v2/order/certificate/{{order_id}}/dcv-random-value](https://dev.digicert.com/md/certcentral-apis/services-api/orders/dv-ssl-generate-dcv-token.md): DV SSL: Generate DCV token
- [PUT /services/v2/order/certificate/{{order_id}}/check-dcv](https://dev.digicert.com/md/certcentral-apis/services-api/orders/dv-ssl-check-dcv.md): DV SSL: Check DCV
- [PUT /services/v2/order/certificate/{{order_id}}/resend-emails](https://dev.digicert.com/md/certcentral-apis/services-api/orders/dv-ssl-resend-emails.md): DV SSL: Resend emails
- [GET /services/v2/order/certificate/38584158/email-validation](https://dev.digicert.com/md/certcentral-apis/services-api/orders/email-validation-status.md): Email validation status
- [PUT /services/v2/order/certificate/12345678/guest-access](https://dev.digicert.com/md/certcentral-apis/services-api/orders/edit-guest-access-order.md): Edit guest access (order)
- [PUT /services/v2/order/certificate/{{order_id}}/renewal-emails/{{status}}](https://dev.digicert.com/md/certcentral-apis/services-api/orders/update-renewal-notification-settings.md): Update renewal notification settings
- [PUT /services/v2/order/certificate/123456789/auto-reissue](https://dev.digicert.com/md/certcentral-apis/services-api/orders/update-auto-reissue-settings.md): Update auto-reissue settings
- [PUT /services/v2/order/certificate/144457106/vmc](https://dev.digicert.com/md/certcentral-apis/services-api/orders/update-vmc-or-cmc-orders.md): Update VMC or CMC orders
- [POST /services/v2/order/certificate/144457106/vmc/logo](https://dev.digicert.com/md/certcentral-apis/services-api/orders/upload-vmc-or-cmc-logo-svg.md): Upload VMC or CMC logo (SVG)
- [POST /services/v2/order/certificate/12345/vmc/encoded-logo](https://dev.digicert.com/md/certcentral-apis/services-api/orders/upload-vmc-or-cmc-logo-encoded.md): Upload VMC or CMC logo (encoded)
- [GET /services/v2/order/certificate/12345/vmc/logo](https://dev.digicert.com/md/certcentral-apis/services-api/orders/get-vmc-or-cmc-logo.md): Get VMC or CMC logo
- [PUT /services/v2/order/certificate/{{order_id}}/dns-names](https://dev.digicert.com/md/certcentral-apis/services-api/orders/edit-domains-on-a-pending-order-or-reissue.md): Edit domains on a pending order or reissue
- [PUT /services/v2/order/certificate/{{order_id}}/contact](https://dev.digicert.com/md/certcentral-apis/services-api/orders/update-order-contacts.md): Update order contacts
- [PUT /services/v2/order/certificate/{{order_id}}/order-approval/resend-emails](https://dev.digicert.com/md/certcentral-apis/services-api/orders/resend-order-approval-email.md): Resend order approval email
- [GET /services/v2/order/certificate/12345/signature-unit](https://dev.digicert.com/md/certcentral-apis/services-api/orders/view-keylocker-signatures.md): View KeyLocker signatures
- [PUT /reports/v1/report/types/orders/supported-columns](https://dev.digicert.com/md/certcentral-apis/services-api/orders/purchase-keylocker-signatures.md): Purchase KeyLocker signatures
##### Organizations
- [GET /services/v2/organization](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/list-organizations.md): List organizations
- [POST /services/v2/organization](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/create-organization.md): Create organization
- [PUT /services/v2/organization/{{organization_id}}/activate](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/activate-organization.md): Activate organization
- [DELETE /services/v2/organization/{{organization_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/delete-organization.md): Delete organization
- [GET /services/v2/organization/recent](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/recent-organizations.md): Recent organizations
- [PUT /services/v2/organization/{{organization_id}}/deactivate](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/deactivate-organization.md): Deactivate organization
- [GET /services/v2/organization/{{organization_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/organization-info.md): Organization info
- [GET /services/v2/organization/potential-approvers](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/list-approvers.md): List approvers
- [GET /services/v2/organization/validation-type](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/validation-types.md): Validation types
- [POST /services/v2/organization/{{organization_id}}/validation](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/submit-for-validation.md): Submit for validation
- [GET /services/v2/organization/{{organization_id}}/validation](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/validation-details.md): Validation details
- [PUT /services/v2/organization/{{organization_id}}/contact](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/update-organization-and-technical-contact.md): Update organization and technical contact
- [GET /services/v2/organization/{{organization_id}}/contact](https://dev.digicert.com/md/certcentral-apis/services-api/organizations/organization-and-technical-contact-info.md): Organization and technical contact info
##### Products
- [GET /services/v2/product](https://dev.digicert.com/md/certcentral-apis/services-api/products/product-list.md): Product list
- [GET /services/v2/product/{{name_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/products/product-info.md): Product info
- [GET /services/v2/product/pricing](https://dev.digicert.com/md/certcentral-apis/services-api/products/pricing-list.md): Pricing list
- [GET /services/v2/product/platform-certformat-mapping](https://dev.digicert.com/md/certcentral-apis/services-api/products/certificate-format-map.md): Certificate format map
##### Reports
- [GET /services/v2/report/request](https://dev.digicert.com/md/certcentral-apis/services-api/reports/request-summary.md): Request summary
- [GET /services/v2/report/order/expiring](https://dev.digicert.com/md/certcentral-apis/services-api/reports/expiring-orders-and-certificates.md): Expiring orders and certificates
- [GET /services/v2/report/order](https://dev.digicert.com/md/certcentral-apis/services-api/reports/order-report.md): Order report
##### Requests
- [GET /services/v2/request](https://dev.digicert.com/md/certcentral-apis/services-api/requests/list-requests.md): List requests
- [GET /services/v2/request/{{request_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/requests/request-info.md): Request info
- [GET /services/v2/request/{{request_id}}/status](https://dev.digicert.com/md/certcentral-apis/services-api/requests/update-request-status.md): Update request status
- [GET /services/v2/request/{{request_id}}/csr](https://dev.digicert.com/md/certcentral-apis/services-api/requests/update-csr-for-a-pending-reissue-request.md): Update CSR for a pending reissue request
##### Subaccount
- [GET /services/v2/account/subaccount](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/list-subaccounts.md): List subaccounts
- [POST /services/v2/account](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/create-subaccount.md): Create subaccount
- [GET /services/v2/account/subaccount/{{subaccount_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/subaccount-info.md): Subaccount info
- [PUT /services/v2/account/subaccount/{{subaccount_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/edit-subaccount.md): Edit subaccount
- [GET /services/v2/account/subaccount/order](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/list-subaccount-orders.md): List subaccount orders
- [GET /services/v2/account/subaccount/order/{{order_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/subaccount-order-info.md): Subaccount order info
- [GET /services/v2/account/subaccount/{{subaccount_id}}/products](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/list-subaccount-products.md): List subaccount products
- [GET /services/v2/account/subaccount/{{subaccount_id}}/product-limits](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/list-subaccount-product-limits.md): List subaccount product limits
- [PUT /services/v2/account/subaccount/{{subaccount_id}}/products](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/set-subaccount-products.md): Set subaccount products
- [GET /services/v2/account/subaccount/{{subaccount_id}}/report](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/subaccount-report.md): Subaccount report
- [POST /services/v2/account/subaccount/{{subaccount_id}}/balance](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/add-or-remove-funds.md): Add or remove funds
- [GET /services/v2/account/subaccount/{{subaccount_id}}/balance](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/balance-details.md): Balance details
- [POST /services/v2/units/order](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/create-unit-order.md): Create unit order
- [GET /services/v2/units/order](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/list-unit-orders.md): List unit orders
- [PUT /services/v2/units/order/1234/cancel](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/cancel-unit-order.md): Cancel unit order
- [GET /services/v2/units/order/1234](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/unit-order-details.md): Unit order details
- [GET /services/v2/account/subaccount/1234567/domain](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/list-subaccount-domains.md): List subaccount domains
- [GET /services/v2/account/subaccount/1389108/organization](https://dev.digicert.com/md/certcentral-apis/services-api/subaccount/list-subaccount-organizations.md): List subaccount organizations
##### Users
- [GET /services/v2/user](https://dev.digicert.com/md/certcentral-apis/services-api/users/list-users.md): List users
- [GET /services/v2/user/api-only](https://dev.digicert.com/md/certcentral-apis/services-api/users/list-service-users.md): List service users
- [GET /services/v2/user/availability/{{user_name}}](https://dev.digicert.com/md/certcentral-apis/services-api/users/username-availability.md): Username availability
- [POST /services/v2/user](https://dev.digicert.com/md/certcentral-apis/services-api/users/add-user.md): Add user
- [POST /services/v2/user](https://dev.digicert.com/md/certcentral-apis/services-api/users/add-service-user.md): Add service user
- [GET /services/v2/user/{{user_id}}/resend-create-email](https://dev.digicert.com/md/certcentral-apis/services-api/users/resend-create-user-email.md): Resend create user email
- [GET /services/v2/user/{{user_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/users/user-info.md): User info
- [PUT /services/v2/user/{{user_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/users/edit-user.md): Edit user
- [PUT /services/v2/user/{{user_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/users/edit-service-user.md): Edit service user
- [PUT /services/v2/user/{{user_id}}/role](https://dev.digicert.com/md/certcentral-apis/services-api/users/change-user-role.md): Change user role
- [DELETE /services/v2/user/{{user_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/users/delete-user.md): Delete user
- [PUT /services/v2/user/{{user_id}}/container-assignments](https://dev.digicert.com/md/certcentral-apis/services-api/users/update-container-assignments.md): Update container assignments
##### Utilities
- [PUT /services/v2/util/validate-vmc-logo](https://dev.digicert.com/md/certcentral-apis/services-api/utilities/validate-vmc-or-cmc-logo-format-svg.md): Validate VMC or CMC logo format (SVG)
- [PUT /services/v2/util/validate-vmc-encoded-logo](https://dev.digicert.com/md/certcentral-apis/services-api/utilities/validate-vmc-or-cmc-logo-format-encoded.md): Validate VMC or CMC logo format (encoded)
##### Vouchers
- [POST /services/v2/voucher](https://dev.digicert.com/md/certcentral-apis/services-api/vouchers/create-voucher-order.md): Create voucher order
- [GET /services/v2/voucher](https://dev.digicert.com/md/certcentral-apis/services-api/vouchers/list-all-voucher-orders.md): List all voucher orders
- [GET /services/v2/voucher/{{voucher_order_id}}/download](https://dev.digicert.com/md/certcentral-apis/services-api/vouchers/list-codes-for-voucher-order.md): List codes for voucher order
- [PUT /services/v2/voucher/{id}/cancel](https://dev.digicert.com/md/certcentral-apis/services-api/vouchers/cancel-voucher-code.md): Cancel voucher code
- [GET /services/v2/voucher/{id}](https://dev.digicert.com/md/certcentral-apis/services-api/vouchers/get-voucher-order-details.md): Get voucher order details
- [GET /services/v2/voucher/download/used-codes](https://dev.digicert.com/md/certcentral-apis/services-api/vouchers/list-used-voucher-codes.md): List used voucher codes
##### Vulnerability assessments
- [PUT /services/v2/vulnerability-assessment/{{order_id}}/scan](https://dev.digicert.com/md/certcentral-apis/services-api/vulnerability-assessments/enable-scanning.md): Enable scanning
- [DELETE /services/v2/vulnerability-assessment/{{order_id}}/scan](https://dev.digicert.com/md/certcentral-apis/services-api/vulnerability-assessments/disable-scanning.md): Disable scanning
- [GET /services/v2/vulnerability-assessment/{{order_id}}/status](https://dev.digicert.com/md/certcentral-apis/services-api/vulnerability-assessments/get-enabled-status.md): Get enabled status
- [GET /services/v2/vulnerability-assessment/{{order_id}}/details](https://dev.digicert.com/md/certcentral-apis/services-api/vulnerability-assessments/get-scan-details.md): Get scan details
- [GET /services/v2/vulnerability-assessment/{{order_id}}/report/{{domain_name}}](https://dev.digicert.com/md/certcentral-apis/services-api/vulnerability-assessments/download-results.md): Download results
- [GET /services/v2/vulnerability-assessment/{{order_id}}/notification-settings](https://dev.digicert.com/md/certcentral-apis/services-api/vulnerability-assessments/get-notification-settings.md): Get notification settings
- [Update notification settings](https://dev.digicert.com/md/certcentral-apis/services-api/vulnerability-assessments/update-notification-settings.md):  Use this endpoint to change the setting for when you receive notification emails about vulnerability assessments for an order. Replace {{order_id}} in the URL …
- [PUT /services/v2/vulnerability-assessment/{{order_id}}/rescan/{{domain}}](https://dev.digicert.com/md/certcentral-apis/services-api/vulnerability-assessments/rescan-domain.md): Rescan domain
##### Webhooks
- [POST /services/v2/webhook](https://dev.digicert.com/md/certcentral-apis/services-api/webhooks/create-webhook.md): Create webhook
- [POST /services/v2/webhook/test-endpoint](https://dev.digicert.com/md/certcentral-apis/services-api/webhooks/send-test-event.md): Send test event
- [PUT /services/v2/webhook/{{webhook_id}}/send-challenge](https://dev.digicert.com/md/certcentral-apis/services-api/webhooks/send-challenge-token.md): Send challenge token
- [PUT /services/v2/webhook/{{webhook_id}}/check-challenge](https://dev.digicert.com/md/certcentral-apis/services-api/webhooks/verify-challenge-token.md): Verify challenge token
- [PUT /services/v2/webhook/{{webhook_id}}/activate](https://dev.digicert.com/md/certcentral-apis/services-api/webhooks/activate-webhook.md): Activate webhook
- [PUT /services/v2/webhook/{{webhook_id}}/deactivate](https://dev.digicert.com/md/certcentral-apis/services-api/webhooks/deactivate-webhook.md): Deactivate webhook
- [PUT /services/v2/webhook/{{webhook_id}}](https://dev.digicert.com/md/certcentral-apis/services-api/webhooks/update-webhook-endpoint.md): Update webhook endpoint
- [GET /services/v2/webhook](https://dev.digicert.com/md/certcentral-apis/services-api/webhooks/list-webhooks.md): List webhooks
- [GET /services/v2/webhook/{{webhook_id}}/event-logs](https://dev.digicert.com/md/certcentral-apis/services-api/webhooks/webhook-event-logs.md): Webhook event logs
##### Important API changes
- [End of 4-6 year Multi-year Plans for public TLS/SSL and VMC certificates](https://dev.digicert.com/md/certcentral-apis/services-api/api-changes/end-of-4-6-year-multi-year-plans-for-public-tls-ssl-and-vmc-certificates.md): On October 31, 2023, DigiCert will no longer sell 4- to 6-year Multi-year Plans for TLS and VMC certificates. We will continue to offer 1, 2, and 3-year …
#### Webhooks
CertCentral webhooks send you automatic updates for certificate issuance and validation events. Use webhooks to trigger automated workflows without polling the CertCentral Services API for certificate …
- [CertCentral event types](https://dev.digicert.com/md/certcentral-apis/webhooks/certcentral-event-types.md): Certificate issued CertCentral sends certificate issued (certificate_issued) events when DigiCert issues a certificate in your CertCentral account. By default, …
- [Customize certificate issued events](https://dev.digicert.com/md/certcentral-apis/webhooks/customize-certificate-issued-events.md): Include certificate chain in certificate_issued events By default, certificate issued events only include the ID of the issued certificate and the certificate …
- [Customize validation expired and revalidation notice events](https://dev.digicert.com/md/certcentral-apis/webhooks/customize-validation-expired-and-revalidation-notice-events.md): If you enable validation expired or revalidation notice events for domains or organizations, you can choose when to receive notifications: 90 days before 60 …
- [Get webhook notifications in Slack](https://dev.digicert.com/md/certcentral-apis/webhooks/get-webhook-notifications-in-slack.md): This section describes how to deliver CertCentral webhook notifications to a channel in your Slack workspace. When you integrate CertCentral webhooks with …
#### Report Library API
The DigiCert CertCentral® Report Library API allows you to build reports that run automatically to get customized sets of data from your DigiCert CertCentral® account. This API is for teams that need …
- [About reports and report runs](https://dev.digicert.com/md/certcentral-apis/report-library-api/about-reports-and-report-runs.md): Most requests in the Report Library API interact with the resource for a report or a report run. Reports and report runs use the same data structure and have …
- [How to build a report](https://dev.digicert.com/md/certcentral-apis/report-library-api/how-to-build-a-report.md): The Report Library API allows you to build reports that run on a schedule to provide you with customized data from your CertCentral account. When you build a …
- [Errors](https://dev.digicert.com/md/certcentral-apis/report-library-api/errors.md): Report Library API errors return both an HTTP status code and an error message. Errors caused by the client return a 4xx Client Error status code. Errors caused …
- [POST /reports/v1/report](https://dev.digicert.com/md/certcentral-apis/report-library-api/create-report.md): Create report
- [PUT /reports/v1/report/{{report_identifier}}](https://dev.digicert.com/md/certcentral-apis/report-library-api/edit-report.md): Edit report
- [GET /reports/v1/report/{{report_identifier}}](https://dev.digicert.com/md/certcentral-apis/report-library-api/report-details.md): Report details
- [POST https: //api.digicert.com/reports/v1/report/{{report_identifier}}/run](https://dev.digicert.com/md/certcentral-apis/report-library-api/start-report-run.md): Start report run
- [GET /reports/v1/report/{{report_identifier}}/{{report_run_identifier}}#download](https://dev.digicert.com/md/certcentral-apis/report-library-api/download-report.md): Download report
- [GET /reports/v1/report/{{report-identifier}}/{{report-run-identifier}}/json](https://dev.digicert.com/md/certcentral-apis/report-library-api/get-json-report.md): Get JSON report
- [GET /reports/v1/report/history](https://dev.digicert.com/md/certcentral-apis/report-library-api/list-report-history.md): List report history
- [DELETE /reports/v1/report/scheduled/{{report_identifier}}](https://dev.digicert.com/md/certcentral-apis/report-library-api/delete-scheduled-report.md): Delete scheduled report
- [DELETE /reports/v1/report/{{report_identifier}}](https://dev.digicert.com/md/certcentral-apis/report-library-api/delete-report.md): Delete report
- [DELETE /reports/v1/report/{{report_identifier}}/{{report_run_identifier}}](https://dev.digicert.com/md/certcentral-apis/report-library-api/delete-report-run.md): Delete report run
- [GET /reports/v1/report/names](https://dev.digicert.com/md/certcentral-apis/report-library-api/list-report-names.md): List report names
- [GET /reports/v1/report/types](https://dev.digicert.com/md/certcentral-apis/report-library-api/list-report-types.md): List report types
- [GET /reports/v1/report/types/orders/supported-columns](https://dev.digicert.com/md/certcentral-apis/report-library-api/list-columns.md): List columns
##### Column filters
- [Filters reference: Types and operators](https://dev.digicert.com/md/certcentral-apis/report-library-api/column-filters/filters-reference-types-and-operators.md): Filter operators Filter operators define how we determine if the contents of a column meet the filter criteria. To get the filter operators that a column …
- [Add a filter](https://dev.digicert.com/md/certcentral-apis/report-library-api/column-filters/add-a-filter.md): To add a filter, include the filters array in your API request to create or edit a report. In your JSON payload, place the filters array inside the …
- [Customize reports with multiple filters](https://dev.digicert.com/md/certcentral-apis/report-library-api/column-filters/customize-reports-with-multiple-filters.md): When creating or editing a report, you can customize filter conditions by adding multiple filters. You can add as many filters as you need. Adding multiple …
#### Discovery API
The CertCentral Discovery API is a powerful REST API that allows you to scan your network using sensors and find all your internal and public facing SSL/TLS certificates regardless of the issuing …
##### Certificates
- [POST /apicontroller/v1/certificate/list](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/list-certificates.md): List certificates
- [POST /apicontroller/v1/sslrating/getServerRating](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/view-endpoint-rating.md): View endpoint rating
- [POST /apicontroller/v1/certificate/filter](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/list-certificate-filter-values.md): List certificate filter values
- [POST /apicontroller/v1/reports/viewIpPort](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/list-endpoints.md): List endpoints
- [POST /apicontroller/v1/reports/filter](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/list-endpoint-filter-values.md): List endpoint filter values
- [POST /apicontroller/v1/certificate/delete](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/delete-certificate.md): Delete certificate
- [POST /apicontroller/v1/certificate/addTags](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/add-tags.md): Add tags
- [GET /apicontroller/v1/certificate/download](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/download-certificate.md): Download certificate
- [POST /apicontroller/v1/sslrating/getCertificateRating](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/view-certificate-rating.md): View certificate rating
- [POST /apicontroller/v1/certificate/getCertificateDetails](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/view-certificate-details.md): View certificate details
- [POST /apicontroller/v1/certificate/getCertChainDetails](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/get-certificate-chain-details.md): Get certificate chain details
- [POST /apicontroller/v1/reports/delete](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/delete-endpoints.md): Delete endpoints
- [POST /apicontroller/v1/certificate/deleteAllCertificatesEndpoints](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/delete-all-certificates-and-endpoints.md): Delete all certificates and endpoints
- [POST /apicontroller/v1/certificate/updateRenewalEmailPrefere](https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/update-renewal-notifications.md): Update renewal notifications
##### Scan lifecycle
- [POST /apicontroller/v1/scan/create](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-lifecycle/create-scan.md): Create scan
- [POST /apicontroller/v1/scan/update](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-lifecycle/update-scan.md): Update scan
- [POST /apicontroller/v1/scan/abort](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-lifecycle/abort-scan.md): Abort scan
- [POST /apicontroller/v1/scan/suspend](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-lifecycle/suspend-scan.md): Suspend scan
- [POST /apicontroller/v1/scan/delete](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-lifecycle/delete-scan.md): Delete scan
- [POST /apicontroller/v1/scan/reinstate](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-lifecycle/reinstate-scan.md): Reinstate scan
- [POST /apicontroller/v1/scan/removeJobs](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-lifecycle/remove-scan.md): Remove scan
##### Scan activity
- [POST /apicontroller/v1/scan/futureScanJobs](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-activity/list-scheduled-jobs.md): List scheduled jobs
- [POST /apicontroller/v1/scan/deleteFutureJob](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-activity/delete-scheduled-job.md): Delete scheduled job
- [POST /apicontroller/v1/scan/pastScanJobs](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-activity/list-past-jobs.md): List past jobs
- [POST /apicontroller/v1/scan/restoreJobs](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-activity/restore-jobs.md): Restore jobs
- [GET /apicontroller/v1/scan/getScanSubscriptionLimits](https://dev.digicert.com/md/certcentral-apis/discovery-api/scan-activity/get-scan-subscription-limits.md): Get scan subscription limits
##### List and filter
- [POST /apicontroller/v1/scan/list](https://dev.digicert.com/md/certcentral-apis/discovery-api/list-and-filter/scan-list.md): Scan list
- [POST /apicontroller/v1/scan/filter](https://dev.digicert.com/md/certcentral-apis/discovery-api/list-and-filter/filter-scan.md): Filter scan
- [GET /apicontroller/v1/scan/getScanDetails](https://dev.digicert.com/md/certcentral-apis/discovery-api/list-and-filter/get-scan-details.md): Get scan details
##### Cloud scan
- [GET /apicontroller/v1/scan/getCloudScanDetails](https://dev.digicert.com/md/certcentral-apis/discovery-api/cloud-scan/get-cloud-scan-details.md): Get cloud scan details
- [POST /apicontroller/v1/scan/updateCloudScan](https://dev.digicert.com/md/certcentral-apis/discovery-api/cloud-scan/update-cloud-scan.md): Update cloud scan
- [GET /apicontroller/v1/scan/getCloudScanActivity](https://dev.digicert.com/md/certcentral-apis/discovery-api/cloud-scan/get-cloud-scan-activity.md): Get cloud scan activity
- [POST /apicontroller/v1/scan/abortCloudScan](https://dev.digicert.com/md/certcentral-apis/discovery-api/cloud-scan/abort-cloud-scan.md): Abort cloud scan
##### Sensor
- [POST /apicontroller/v1/sensor/getSensorDetails](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/get-sensor-details.md): Get sensor details
- [POST /apicontroller/v1/sensor/updateSensorDetails](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/update-sensor-details.md): Update sensor details
- [GET /apicontroller/v1/sensor/advancedSettings](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/get-advanced-settings.md): Get advanced settings
- [POST /apicontroller/v1/sensor/updateAdvancedSettings](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/update-advanced-settings.md): Update advanced settings
- [POST /apicontroller/v1/sensor/upgradeSensor](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/upgrade-sensor.md): Upgrade sensor
- [POST /apicontroller/v1/sensor/list](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/sensor-list.md): Sensor list
- [POST /apicontroller/v1/sensor/filter](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/sensor-filter.md): Sensor filter
- [POST /apicontroller/v1/sensor/suspend](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/suspend-sensor.md): Suspend sensor
- [POST /apicontroller/v1/sensor/void](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/void-sensor.md): Void sensor
- [POST /apicontroller/v1/sensor/reinstate](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/reinstate-sensor.md): Reinstate sensor
- [POST /apicontroller/v1/sensor/stopDebug](https://dev.digicert.com/md/certcentral-apis/discovery-api/sensor/stop-debug.md): Stop debug
##### Keys
- [POST /apicontroller/v1/key/getKeyDetails](https://dev.digicert.com/md/certcentral-apis/discovery-api/keys/get-key-details.md): Get key details
- [POST /apicontroller/v1/key/filter](https://dev.digicert.com/md/certcentral-apis/discovery-api/keys/key-filter.md): Key filter
- [POST /apicontroller/v1/key/list](https://dev.digicert.com/md/certcentral-apis/discovery-api/keys/list-keys.md): List keys
- [POST /apicontroller/v1/key/delete](https://dev.digicert.com/md/certcentral-apis/discovery-api/keys/delete-key.md): Delete key
##### Subdomains
- [POST /apicontroller/v1/scan/getSubdomains](https://dev.digicert.com/md/certcentral-apis/discovery-api/subdomains/get-subdomains.md): Get subdomains
##### Dashboard
- [POST /apicontroller/v1/wall/alertCount](https://dev.digicert.com/md/certcentral-apis/discovery-api/dashboard/alert-count.md): Alert count
#### Automation API
The DigiCert Automation API is a powerful API that allows you to automate certificate enrollment and installation on your devices. The Automation API gives you complete control to configure automation …
- [POST /automationws/v1/automation/createAutomation](https://dev.digicert.com/md/certcentral-apis/automation-api/create-automation.md): Create automation
- [POST /automationws/v1/automation/createAutomation/bulk](https://dev.digicert.com/md/certcentral-apis/automation-api/create-bulk-automation.md): Create bulk automation
- [POST /automationws/v1/automation/viewAutomationDetails](https://dev.digicert.com/md/certcentral-apis/automation-api/view-automation-details.md): View automation details
- [POST /automationws/v1/automatedips/list](https://dev.digicert.com/md/certcentral-apis/automation-api/get-automation-ips-list.md): Get automation IPs list
- [POST /automationws/v1/profile/createProfile](https://dev.digicert.com/md/certcentral-apis/automation-api/create-profile.md): Create profile
- [POST /automationws/v1/profile/updateProfile](https://dev.digicert.com/md/certcentral-apis/automation-api/update-profile-details.md): Update profile details
- [POST /automationws/v1/profile/details](https://dev.digicert.com/md/certcentral-apis/automation-api/get-profile-details.md): Get profile details
- [POST /automationws/v1/automation/updateInstallSettings](https://dev.digicert.com/md/certcentral-apis/automation-api/update-install-settings.md): Update install settings
- [POST /automationws/v1/agent/basicdetails](https://dev.digicert.com/md/certcentral-apis/automation-api/get-agent-summary.md): Get agent summary
- [POST /automationws/v1/agent/update](https://dev.digicert.com/md/certcentral-apis/automation-api/update-agent.md): Update agent
- [POST /automationws/v1/agent/list](https://dev.digicert.com/md/certcentral-apis/automation-api/get-agent-list.md): Get agent list
- [POST /automationws/v1/agent/filter](https://dev.digicert.com/md/certcentral-apis/automation-api/agent-filter.md): Agent filter
- [POST /automationws/v1/agent/checkconfig](https://dev.digicert.com/md/certcentral-apis/automation-api/check-agent-config.md): Check agent config
- [POST /automationws/v1/agent/details](https://dev.digicert.com/md/certcentral-apis/automation-api/get-agent-details.md): Get agent details
- [POST /automationws/v1/agent/acmeClients](https://dev.digicert.com/md/certcentral-apis/automation-api/get-acme-client-details.md): Get ACME client details
- [POST /automationws/v1/agent/agentIPPortDetails](https://dev.digicert.com/md/certcentral-apis/automation-api/get-agent-ip-port-details.md): Get agent IP/port details
- [POST /automationws/v1/agent/advancesettings](https://dev.digicert.com/md/certcentral-apis/automation-api/get-agent-advanced-settings.md): Get agent advanced settings
- [POST /automationws/v1/agent/updateadvancesettings](https://dev.digicert.com/md/certcentral-apis/automation-api/update-agent-advanced-settings.md): Update agent advanced settings
- [POST /automationws/v1/agent/void](https://dev.digicert.com/md/certcentral-apis/automation-api/void-agent.md): Void agent
- [POST /automationws/v1/automation/bulkretryautomationtask](https://dev.digicert.com/md/certcentral-apis/automation-api/bulk-retry-automation.md): Bulk retry automation
#### Custom Reports API
CertCentral’s Custom Reports API allows you to generate customizable and comprehensive data sets by leveraging the powerful GraphQL query language. Available Report Types The available report types …
- [QUERY /services/v2/reports/query](https://dev.digicert.com/md/certcentral-apis/custom-reports-api/order_details.md): order_details
- [QUERY /services/v2/reports/query](https://dev.digicert.com/md/certcentral-apis/custom-reports-api/order_details_by_id.md): order_details_by_id
- [Authentication](https://dev.digicert.com/md/certcentral-apis/authentication.md): Authenticate CertCentral Services API requests with API keys and manage key permissions.
- [Integrate with CertCentral APIs](https://dev.digicert.com/md/certcentral-apis/integrate-with-certcentral-apis.md): DigiCert CertCentral® APIs enables you to seamlessly integrate DigiCert certificate management into your existing systems and workflows. This topic outlines the …
### Trust Lifecycle API
DigiCert® Trust Lifecycle Manager API lets you automate certificate enrollment, manage certificate lifecycles, deploy discovery tools, and orchestrate certificate automation across your enterprise …
- [Overview](https://dev.digicert.com/md/trust-lifecycle-api.md): Automate PKI operations including certificate discovery and lifecycle management.
#### Tutorials
- [Bulk revoke multiple certificates](https://dev.digicert.com/md/trust-lifecycle-api/tutorials/bulk-certificate-revocation.md): Bulk revocation is essential when you need to quickly invalidate large numbers of certificates due to events such as key compromise, misissuance, or other …
- [Request a TLS certificate](https://dev.digicert.com/md/trust-lifecycle-api/tutorials/request-a-tls-certificate.md): Automating TLS certificate issuance reduces manual effort, accelerates deployment cycles, and ensures consistent security posture across your infrastructure. …
- [API reference](https://dev.digicert.com/md/trust-lifecycle-api/api-reference.md): OpenAPI reference documentation for Trust Lifecycle
### DigiCert Private CA API
DigiCert® Private CA API lets you automate the management of root and intermediate certificate authorities, configure certificate validation services, and control CA certificate lifecycle operations. …
- [Overview](https://dev.digicert.com/md/digicert-private-ca-api.md): Manage private CA hierarchies, certificate profiles, and X.509 certificate issuance.
#### Tutorials
- [Issue a certificate from a private CA](https://dev.digicert.com/md/digicert-private-ca-api/tutorials/issue-a-certificate-from-a-private-ca.md): Automate certificate issuance workflows and integrate certificate management.

- [API reference](https://dev.digicert.com/md/digicert-private-ca-api/api-reference.md): OpenAPI reference documentation for DigiCert® Private CA
## Signing
### Software Trust API
DigiCert® Software Trust Manager API lets you automate code signing operations, manage signing keys and certificates, scan software for vulnerabilities, and enforce secure release workflows for your …
- [Overview](https://dev.digicert.com/md/software-trust-api.md): Manage code signing keypairs and automate signing workflows.
#### Tutorials
- [Create a keypair and sign a file hash](https://dev.digicert.com/md/software-trust-api/tutorials/create-a-keypair-and-sign-a-file-hash.md): Cryptographically prove the authenticity and integrity of your software artifacts.

- [API reference](https://dev.digicert.com/md/software-trust-api/api-reference.md): OpenAPI reference documentation for Software Trust
### Content Trust API
DigiCert® Content Trust Manager API lets you automate identity validation, credential issuance, and document signing workflows for digital signature solutions. What you can do Manage signing …
- [Overview](https://dev.digicert.com/md/content-trust-api.md): Content provenance through C2PA-based media authenticity and secure document signing.
#### Tutorials
- [Onboard a signer and issue a signing credential](https://dev.digicert.com/md/content-trust-api/tutorials/onboard-a-signer-and-issue-a-signing-credential.md): Create a signer and issue credentials for document signing.

- [Manage credential lifecycle for document signers](https://dev.digicert.com/md/content-trust-api/tutorials/manage-credential-lifecycle-for-document-signers.md): Cancel, revoke, or reassign credentials as needs change.

- [Media signing API](https://dev.digicert.com/md/content-trust-api/media-signing-api.md): Media Signing API The DigiCert One Content Trust Manager Media Signing API lets you sign media with a C2PA-compliant manifest to help establish content …
- [API reference](https://dev.digicert.com/md/content-trust-api/api-reference.md): OpenAPI reference documentation for Content Trust
## Devices and IoT
### Device Trust API
DigiCert® Device Trust Manager API helps you automate device identity management, certificate lifecycle operations, and software deployment for your IoT and connected device fleet. What you can do …
- [Overview](https://dev.digicert.com/md/device-trust-api.md): IoT device provisioning, certificate enrollment, firmware updates, and lifecycle management.
#### Tutorials
- [Configure and use EST](https://dev.digicert.com/md/device-trust-api/tutorials/configure-and-use-est.md): To perform this action, you must have a user role that contains the Solution administrator permission. Enrollment over Secure Transport (EST) is a popular …
- [Register a single device](https://dev.digicert.com/md/device-trust-api/tutorials/register-a-single-device.md): Create a division, attach a bootstrap certificate policy to a device group, and register a single device.

- [API reference](https://dev.digicert.com/md/device-trust-api/api-reference.md): OpenAPI reference documentation for Device Trust
### IoT Trust API
- [Overview](https://dev.digicert.com/md/iot-trust-manager-api.md): Automate IoT credential provisioning and device authentication.
#### Tutorials
- [Request certificate with server-side keypair generation](https://dev.digicert.com/md/iot-trust-manager-api/tutorials/request-certificate-with-server-side-keypair-generation.md): When you request certificates with DigiCert® IoT Trust Manager, you can use server-side keypair generation as an alternative to providing a certificate signing …
- [Subject directory attributes (SDA)](https://dev.digicert.com/md/iot-trust-manager-api/tutorials/subject-directory-attributes-sda.md): When requesting a certificate using DigiCert® IoT Trust Manager, you can use the subject directory attributes (SDA) certificate extension to store information …
- [CSV format for batch certificate enrollment](https://dev.digicert.com/md/iot-trust-manager-api/tutorials/csv-format-for-batch-certificate-enrollment.md): DigiCert® IoT Trust Manager supports the option to create a batch certificate enrollment job by uploading a CSV file with details for each certificate request. …
##### Batch enrollment guide
- [Choose keypair generation method](https://dev.digicert.com/md/iot-trust-manager-api/tutorials/batch-enrollment-guide/choose-keypair-generation-method.md): DigiCert® IoT Trust Manager supports client-side and server-side keypair generation for batch enrollment jobs and individual certificate requests. The …
- [Prepare enrollment data](https://dev.digicert.com/md/iot-trust-manager-api/tutorials/batch-enrollment-guide/prepare-enrollment-data.md): This section provides instructions to help you prepare the data required to create a batch enrollment job in DigiCert® IoT Trust Manager. When you start a batch …
- [Start the batch job](https://dev.digicert.com/md/iot-trust-manager-api/tutorials/batch-enrollment-guide/start-the-batch-job.md): This section includes instructions and examples to help you format your API request to start a batch enrollment job in DigiCert® IoT Trust Manager. Before you …
- [Manage batch job approvals](https://dev.digicert.com/md/iot-trust-manager-api/tutorials/batch-enrollment-guide/manage-batch-job-approvals.md): When you start a batch enrollment job, if the enrollment profile requires certificate approvals, a user with the right permissions must approve the batch job …
- [Download certificates](https://dev.digicert.com/md/iot-trust-manager-api/tutorials/batch-enrollment-guide/download-certificates.md): This section describes how to use the API to download a completed batch job. When the status of a batch job is COMPLETE, you can download the issued …
- [Overview](https://dev.digicert.com/md/iot-trust-manager-api/overview.md): Authentication The DigiCert ONE APIs support header-based API key authentication. Additionally, a subset of the DigiCert® IoT Trust Manager APIs support …
- [API reference](https://dev.digicert.com/md/iot-trust-manager-api/api-reference.md): OpenAPI reference documentation for IoT Trust
### TrustEdge
DigiCert® TrustEdge is a versatile executable designed to facilitate secure communication, device provisioning, and lifecycle management for IoT devices. Built using DigiCert® TrustCore SDK, TrustEdge …
- [Overview](https://dev.digicert.com/md/trustedge.md): Open-source IoT device security agent.
#### Install and configure
This section provides instructions for installing and configuring TrustEdge on Linux systems. By following this guide, you will install TrustEdge, configure essential settings, and understand how to …
- [Install TrustEdge on Linux](https://dev.digicert.com/md/trustedge/install-and-configure/install-trustedge-on-linux.md):  Make sure your device meets the system requirements needed to install and run TrustEdge. TrustEdge can be downloaded from the GitHub repository as a Debian …
- [Install and run TrustEdge with Zephyr RTOS](https://dev.digicert.com/md/trustedge/install-and-configure/install-and-run-trustedge-with-zephyr-rtos.md): You can install and run TrustEdge with Zephyr RTOS using either the native simulator (native_sim 64-bit board) or the STM32H745 Discovery Kit. Before you begin …
- [Configure TrustEdge](https://dev.digicert.com/md/trustedge/install-and-configure/configure-trustedge.md): TrustEdge uses several configuration files to manage its settings and credentials. Understanding these files allows you to customize TrustEdge according to your …
- [Manage the keystore](https://dev.digicert.com/md/trustedge/install-and-configure/manage-the-keystore.md): TrustEdge uses a keystore to store certificates, private keys, and Certificate Signing Requests (CSRs). Default keystore The default keystore is located at …
- [Uninstall TrustEdge](https://dev.digicert.com/md/trustedge/install-and-configure/uninstall-trustedge.md):  To remove TrustEdge but keep configuration files, use the following command: sudo dpkg -r trustedge To completely remove TrustEdge, including configuration …
#### CLI reference
TrustEdge CLI includes several commands that provide essential operations for IoT device management and security. Use trustedge --version to verify TrustEdge has been installed on the device. To …
- [trustedge](https://dev.digicert.com/md/trustedge/cli-reference/trustedge.md): | Usage | trustedge [options] trustedge &lt;subcommand&gt; [options] | | Description | Base command for TrustEdge CLI. Provides version information, usage …
- [trustedge agent](https://dev.digicert.com/md/trustedge/cli-reference/trustedge-agent.md): | Usage | trustedge agent [options] | | Description | TrustEdge agent acts as the “client” to DigiCert® Device Trust Manager and can be run interactively via …
- [trustedge mqtt](https://dev.digicert.com/md/trustedge/cli-reference/trustedge-mqtt.md): | Usage | trustedge mqtt [options] | | Description | Uses MQTT to subscribe to topics and publish messages. | Overview TrustEdge MQTT provides functionality for …
##### trustedge certificate
- [trustedge certificate est](https://dev.digicert.com/md/trustedge/cli-reference/trustedge-certificate/trustedge-certificate-est.md): | Usage | trustedge certificate est [options] | | Description | Uses EST for certificate enrollment, renewal, and key rekeying. | Overview TrustEdge certificate …
- [trustedge certificate scep](https://dev.digicert.com/md/trustedge/cli-reference/trustedge-certificate/trustedge-certificate-scep.md): | Usage | trustedge certificate scep [options] | | Description | Uses SCEP for certificate enrollment, renewal, and key rekeying. | Overview TrustEdge …
#### Tutorials
- [Create a Certificate Signing Request (CSR)](https://dev.digicert.com/md/trustedge/tutorials/create-a-certificate-signing-request-csr.md): A signed Certificate Signing Request (CSR) includes information about your organization and public key and is signed with the corresponding private key to …
- [EST enrollment](https://dev.digicert.com/md/trustedge/tutorials/est-enrollment.md): Before you begin Make sure you understand the following: TrustEdge must be installed on a supported device. The user running TrustEdge CLI commands must be a …
- [Generate hardware-based private key (TPM2)](https://dev.digicert.com/md/trustedge/tutorials/generate-hardware-based-private-key-tpm2.md): By using the --tap option with the trustedge certificate command, you can generate hardware-based private keys using a Trusted Application Platform (TAP). These …
- [Generate software-based private key](https://dev.digicert.com/md/trustedge/tutorials/generate-software-based-private-key.md): TrustEdge certificate tool allows you to generate software-based private keys that can be used to create Certificate Signing Requests (CSRs) and secure …
- [Generate a x.509 certificate](https://dev.digicert.com/md/trustedge/tutorials/generate-a-x-509-certificate.md): x.509 certificates are used to authenticate devices, secure communications, and verify the integrity of data. The following steps will guide you through …
- [Report custom inventory attributes](https://dev.digicert.com/md/trustedge/tutorials/report-custom-inventory-attributes.md): You may have a scenario where the standard inventory data collected by the TrustEdge agent isn’t enough. Maybe you need to track a device’s GPS location, …
- [SCEP enrollment](https://dev.digicert.com/md/trustedge/tutorials/scep-enrollment.md): Before you begin Make sure you understand the following: TrustEdge must be installed on a supported device. The user running TrustEdge CLI commands must be a …
- [Take ownership of a TPM](https://dev.digicert.com/md/trustedge/tutorials/take-ownership-of-a-tpm.md): The Trusted Platform Module (TPM) is a hardware-based root of trust that enhances device security. TrustEdge supports the TPM 2.0 standard and uses it to …
- [Using PQC to secure MQTT with TrustEdge](https://dev.digicert.com/md/trustedge/tutorials/using-pqc-to-secure-mqtt-with-trustedge.md): This tutorial walks you through setting up a TLS 1.3 session secured by post-quantum cryptography (PQC). You will generate ML-DSA certificates with TrustEdge, …
##### Initialize and start TrustEdge: TrustEdge agent
- [Use TrustEdge agent with JITR](https://dev.digicert.com/md/trustedge/tutorials/initialize-and-start-trustedge-trustedge-agent/use-trustedge-agent-with-jitr.md): If your device uses just‑in‑time registration (JITR) with EST, SCEP, or CMPv2, you can run the TrustEdge agent directly on the device to download and apply the …
- [System requirements](https://dev.digicert.com/md/trustedge/system-requirements.md): TrustEdge compatibility, network requirements, and virtual machine setup options.
- [TrustEdge as a service](https://dev.digicert.com/md/trustedge/trustedge-as-a-service.md): When run as a service, TrustEdge agent allows for continuous secure communication, authentication, and lifecycle management of IoT devices through DigiCert® …
- [Troubleshoot](https://dev.digicert.com/md/trustedge/troubleshoot.md): Troubleshooting guidance for TrustEdge installation, connectivity, configuration, and certificate issues.
- [FAQ](https://dev.digicert.com/md/trustedge/faq.md): General questions What is TrustEdge? TrustEdge is a versatile Linux executable designed to run as both an agent for devices managed through DigiCert® Device …
### TrustCore SDK
Comprehensive security framework for IoT solutions DigiCert® TrustCore SDK provides a complete security framework for IoT applications, real-time embedded software, and safety-critical systems. With …
- [Overview](https://dev.digicert.com/md/trustcore-sdk.md): Complete cryptographic suite for connected devices.
#### Compliance and regulations
- [Importance of IoT cyber security compliance and standards](https://dev.digicert.com/md/trustcore-sdk/compliance-and-regulations/importance-of-iot-cyber-security-compliance-and-standards.md): IoT cybersecurity standards, established by industry bodies and government agencies, play a pivotal role in ensuring that software and hardware products comply …
- [Post-quantum cryptography support in TrustCore SDK](https://dev.digicert.com/md/trustcore-sdk/compliance-and-regulations/post-quantum-cryptography-support-in-trustcore-sdk.md): DigiCert® TrustCore SDK helps developers build secure, compliant, and quantum-resilient IoT and embedded systems. As quantum computing advances, TrustCore …
- [Understand FIPS 140-2 and 140-3](https://dev.digicert.com/md/trustcore-sdk/compliance-and-regulations/understand-fips-140-2-and-140-3.md): Federal Information Processing Standards (FIPS) 140 are U.S. government criteria that provide a benchmark for the security of cryptographic modules. Both …
- [Security vulnerabilities](https://dev.digicert.com/md/trustcore-sdk/compliance-and-regulations/security-vulnerabilities.md): This page lists publicly disclosed security vulnerabilities that affect DigiCert® TrustCore SDK. Each entry includes the CVE identifier (if one exists), the …
- [End of life for TrustCore SDK releases](https://dev.digicert.com/md/trustcore-sdk/compliance-and-regulations/end-of-life-trustcore-sdk-releases.md): DigiCert® is committed to providing clear guidance on product support timelines to help customers plan their technology roadmaps and transitions effectively. …
#### Crypto Interface
TrustCore SDK Crypto Interface layer provides a set of APIs corresponding to various cryptographic algorithms that application developers can use to perform core cryptographic operations. Use the …
- [Digest Algorithms](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/digest-algorithms.md): Digest algorithms support MD4, MD5, SHA1, SHA2, SHA3, and BLAKE2. Only BLAKE2 does not support an operator implementation replacement for NanoCrypto. For each …
- [MAC Algorithms](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/mac-algorithms.md): TrustCore SDK supports the MAC algorithms HMAC, CMAC, Poly1305, and BLAKE2. Like the digest APIs, there are one shot MAC APIs that perform the MAC of a message …
- [Symmetric Key Encryption Algorithms](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/symmetric-key-encryption-algorithms.md): TrustCore SDK supports AES, DES, TripleDES, and Blowfish with at least the CBC mode of operation. For AES, the ECB, CTR, CFB128, OFB, and XTS modes are …
- [AEAD Algorithms](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/aead-algorithms.md): The AES-GCM, AES-CCM, and ChaCha20-Poly1305 as AEAD ciphers are supported. Refer to Symmetric Algorithms for descriptions of these ciphers. This section focuses …
- [Random Number Generation](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/random-number-generation.md): In addition to providing a global RNG (i.e., a pointer g_pRandomContext that is initialized upon NanoCrypto library initialization), Crypto Interface provides …
- [Build and Verify Crypto Interface Example](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/build-and-verify-crypto-interface-example.md): DigiCert provides an example Crypto Interface implementation with a runnable executable. You can build and run this example using either NanoCrypto or mbedtls …
##### Asymmetric Key Algorithms
- [Obtaining Keys](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/asymmetric-key-algorithms/obtaining-keys.md): To perform any asymmetric key operation, you must first obtain a key in one of the following ways: Key generation: Generate a new key as a private/public …
- [RSA Encryption/Decryption](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/asymmetric-key-algorithms/rsa-encryption-decryption.md): The Crypto Interface supports padding modes PKCS #1 v1.5 and PKCS-OAEP. PKCS #1 v1.5 padding mode The PKCS #1 v1.5 padding mode may be used to encrypt data by …
- [RSA Signature/Verification](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/asymmetric-key-algorithms/rsa-signature-verification.md): The Crypto Interface supports padding modes PKCS #1 v1.5 and EMSA-PSS. PKCS #1 v1.5 padding mode The following RSA sign and verify APIs perform only the RSA …
- [ECC Supported Curves](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/asymmetric-key-algorithms/ecc-supported-curves.md): With ECC, you must choose the domain parameters that define what curve you are going to work on when creating an empty key-shell. NanoCrypto supports the five …
- [ECC ElGamal Encryption/Decryption](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/asymmetric-key-algorithms/ecc-elgamal-encryption-decryption.md): The Crypto Interface provides the following APIs for ElGamal encryption and decryption: CRYPTO_INTERFACE_ECEG_init (initializes a context for either encryption …
- [ECDSA Signature/Verification](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/asymmetric-key-algorithms/ecdsa-signature-verification.md): An ECDSA signature is made up of two components: r and s. Each component is a large integer whose size is no bigger than curve order. Often, the signature is …
- [ECDH Key Exchange](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/asymmetric-key-algorithms/ecdh-key-exchange.md): The two main components of ECDH (and finite-field Diffie-Hellman) are: Send the public key to the other party. Compute the copy of a shared secret from the …
- [DSA Signature/Verification](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/asymmetric-key-algorithms/dsa-signature-verification.md): DSA is analogous to ECDSA, except that computations are done in a finite field. Like ECDSA, the resulting signature is made up of two values, r and s. The …
- [DH Key Exchange](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/asymmetric-key-algorithms/dh-key-exchange.md): The process for Diffie-Hellman key exchange in Crypto Interface is analogous to that for ECDH key exchange, except the domain parameters define a cyclic group …
##### Post-quantum cryptographic algorithms
- [ML‑KEM usage](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/post-quantum-cryptographic-algorithms/ml-kem-usage.md): Use the following example code to perform a post‑quantum key‑encapsulation exchange via Crypto Interface QS_* APIs. Initiator MSTATUS status = OK; QS_CTX *pCtx …
- [ML-DSA usage](https://dev.digicert.com/md/trustcore-sdk/crypto-interface/post-quantum-cryptographic-algorithms/ml-dsa-usage.md): Use this example to generate and verify digital signatures via the Crypto Interface QS_* APIs. Sign MSTATUS status = OK; QS_CTX *pCtx = NULL; ubyte *pMsg = …
#### NanoCrypto
NanoCrypto provides cryptographic algorithms, random number generation, and certificate handling for embedded systems.
- [Get started](https://dev.digicert.com/md/trustcore-sdk/nanocrypto/get-started.md): This documentation provides guidance for application programmers incorporating NanoCrypto into their devices’ C/C++ application source code. The information in …
- [Random Number Generation](https://dev.digicert.com/md/trustcore-sdk/nanocrypto/random-number-generation.md): This section provides a few words on random numbers, so that discussions elswhere in the documentation make more sense. Good random numbers are necessary in …
- [Initialization](https://dev.digicert.com/md/trustcore-sdk/nanocrypto/initialization.md): This section describes how to initialize the NanoCrypto library with default settings. To add NanoCrypto functions to an application, the library must first be …
- [Error Codes](https://dev.digicert.com/md/trustcore-sdk/nanocrypto/error-codes.md): To get the textual representation of an error code, several conditions must be met: The __ERROR_LOOKUP_TABLE__ build flag is not set. The …
- [Output Buffers](https://dev.digicert.com/md/trustcore-sdk/nanocrypto/output-buffers.md): Some functions require the caller to supply the output buffer. Other functions allocate memory and return the result in the new buffers, and the caller must …
- [Symmetric Algorithms](https://dev.digicert.com/md/trustcore-sdk/nanocrypto/symmetric-algorithms.md): NanoCrypto supports a variety of symmetric cryptographic operations: Digest algorithms MAC algorithms Encryption algorithms AEAD algorithms Digest algorithms …
- [Asymmetric Algorithms](https://dev.digicert.com/md/trustcore-sdk/nanocrypto/asymmetric-algorithms.md): There are generally three things asymmetric algorithms can do: Encrypt/decrypt Sign/verify Key exchange However, not all algorithms can perform all functions: …
- [NanoCrypto external entropy injection](https://dev.digicert.com/md/trustcore-sdk/nanocrypto/nanocrypto-external-entropy-injection.md): This section describes three different ways to inject external entropy for the random number generator. API usage with user-provided entropy source Build flags …
#### NanoCert
DigiCert® NanoCert provides embedded and IoT devices secure certificate handling, enrollment, and validation capabilities by integrating directly into C/C++ applications. NanoCert delivers certificate …
- [SCEP client](https://dev.digicert.com/md/trustcore-sdk/nanocert/scep-client.md): The Simple Certificate Enrollment Protocol (SCEP) automates X.509 certificate lifecycle operations using Cryptographic Message Syntax (CMS) and PKCS#10 formats. …
- [EST client](https://dev.digicert.com/md/trustcore-sdk/nanocert/est-client.md): The Enrollment over Secure Transport (EST) client provides an alternative certificate enrollment protocol that enhances security and flexibility compared to …
#### NanoMQTT
NanoMQTT is the MQTT client included in TrustCore SDK (beginning with the U6 release). It supports MQTT 3.1.1 and MQTT 5, allowing your application to publish and subscribe over plain TCP (port 1883) …
- [Get started](https://dev.digicert.com/md/trustcore-sdk/nanomqtt/get-started.md): Follow this chapter to compile the synchronous sample client and verify broker connectivity. Before you begin Ensure you have: TrustCore SDK U6 release or later …
- [Embed NanoMQTT in C](https://dev.digicert.com/md/trustcore-sdk/nanomqtt/embed-nanomqtt-in-c.md): This topic shows the smallest synchronous flow needed to connect, subscribe, publish, and service the receive loop in a single-threaded application. Before you …
- [Command-line reference](https://dev.digicert.com/md/trustcore-sdk/nanomqtt/command-line-reference.md): mqtt_client_sample [options] This is not a comprehensive option list. Run mqtt_client_sample --help to view all options. Connection options Flag Description …
- [Integration notes](https://dev.digicert.com/md/trustcore-sdk/nanomqtt/integration-notes.md): Use the steps below as a general guide for binding NanoMQTT to either clear-text TCP or TLS. Switch transports in one line /* TLS (port 8883, NanoSSL already …
- [Troubleshoot](https://dev.digicert.com/md/trustcore-sdk/nanomqtt/troubleshoot.md):  Symptom Likely cause Resolution CONNACK 0x95 “Packet too large” Broker rejects the packet size. Reduce payload size or set max_packet_size in the MQTT 5 …
#### NanoSSH
NanoSSH provides SSH client, port-forwarding, and SFTP server capabilities for embedded and diverse platforms.
- [FAQs](https://dev.digicert.com/md/trustcore-sdk/nanossh/faqs.md):  Does NanoSSH Server support some or all the acceptable cryptographic and message integrity methods? Yes. The list of supported RFCs and interoperability with …
##### NanoSSH client user guide
- [Before you begin](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-client-user-guide/before-you-begin.md): Before beginning to incorporate NanoSSH Client into an application, get familiarized with some related documents and concepts, as well as the recommended …
- [NanoSSH client overview](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-client-user-guide/nanossh-client-overview.md): NanoSSH Client is used to securely connect to remote servers, which may be running NanoSSH Server or any other SSH server. Typical uses for NanoSSH client SSH …
- [Common procedures](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-client-user-guide/common-procedures.md): Use these procedures when building any NanoSSH client example code or integrated application. Steps differ between Commercial and Open Source models. Follow the …
- [Use case examples](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-client-user-guide/use-case-examples.md): This section describes typical NanoSSH Client use cases and explains how to build applicable TrustCore SDK example code: Use NanoSSH client for shell (remote) …
- [Customize a NanoSSH client implementation](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-client-user-guide/customize-a-nanossh-client-implementation.md): After building and verifying the NanoSSH Client example code, the NanoSSH Client implementation may be customized. This section explains how to enable debugging …
- [FAQs](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-client-user-guide/faqs.md): This section provides solutions to common questions considered during NanoSSH Client customization and integration efforts. Should I Use Certificate, …
##### NanoSSH Server user guide
- [NanoSSH Server overview](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-server-user-guide/nanossh-server-overview.md): TrustCore SDK NanoSSH Server enables a secure connection to remote clients, which may be running NanoSSH Client or any other SSH client. Features Small memory …
- [Plan a NanoSSH Server example implementation](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-server-user-guide/plan-a-nanossh-server-example-implementation.md): Before beginning to build the TrustCore SDK NanoSSH server or even selecting which example code to build for evaluation and testing, decide which features are …
- [Build NanoSSH server example code](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-server-user-guide/build-nanossh-server-example-code.md):  NanoSSH server implementation tasks The following are the basic tasks for building any of the NanoSSH server example code implementations. Add the NanoSSH …
- [Customize a NanoSSH server implementation](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-server-user-guide/customize-a-nanossh-server-implementation.md): After building and verifying the NanoSSH server example code, the NanoSSH server implementation may be customized and integrated into an application. Before …
- [OCSP support and configuration](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-server-user-guide/ocsp-support-and-configuration.md):  RFC 6187: Certificate-Based Authentication The NanoSSH client and NanoSSH server support RFC 6187 certificate-based authentication. The NanoSSH client requests …
- [FAQs](https://dev.digicert.com/md/trustcore-sdk/nanossh/nanossh-server-user-guide/faqs.md): This section provides solutions to common questions considered during NanoSSH server customization and integration efforts. DSA, RSA, or ECDSA Encryption? …
#### NanoSSL
NanoSSL provides TLS/SSL APIs, certificate management, standards support, and secure transport details.
- [NanoSSL overview](https://dev.digicert.com/md/trustcore-sdk/nanossl/nanossl-overview.md): This documentation describes NanoSSL, its features, important design considerations, and guidance for application programmers incorporating NanoSSL into their …
- [NanoSSL client integration](https://dev.digicert.com/md/trustcore-sdk/nanossl/nanossl-client-integration.md): Client integration process overview This table describes the tasks for integrating NanoSSL client into an application. Task Description Refer to 1 Add the …
- [NanoSSL server integration](https://dev.digicert.com/md/trustcore-sdk/nanossl/nanossl-server-integration.md): With TrustCore SDK NanoSSL server, devices may securely connect to remote peers. Server integration process overview This table describes the tasks for …
##### Get started
- [OpenSSL shim compatibility](https://dev.digicert.com/md/trustcore-sdk/nanossl/get-started/openssl-shim-compatibility.md): Compatibility status description Status Description Defined, Implemented Fully supported. Defined, Partial Implementation Support verified based on requirements …
- [Minimum hardware requirements](https://dev.digicert.com/md/trustcore-sdk/nanossl/get-started/minimum-hardware-requirements.md):  Supported hardware and software To run NanoSSL, ensure your system meets the following minimum hardware and software requirements: Supported host processor and …
- [Cipher suite support](https://dev.digicert.com/md/trustcore-sdk/nanossl/get-started/cipher-suite-support.md):  Supported Flags: __ENABLE_MOCANA_SSL_DSA_SUPPORT__ Cipher suites: TLS_DHE_DSS_WITH_AES_128_CBC_SHA TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 Supported (not …
- [Modes of operation](https://dev.digicert.com/md/trustcore-sdk/nanossl/get-started/modes-of-operation.md): The NanoSSL library provides different modes of operation to cater to a variety of application requirements. This section describes the synchronous and …
- [Using TPM keys](https://dev.digicert.com/md/trustcore-sdk/nanossl/get-started/using-tpm-keys.md): TPM key PEM and certificate generation Generate the TPM RSA PEM File: Generate the necessary RSA PEM file for the TPM. Update the ESTC Client Binary: Navigate …
- [Understand TCP and SSL functions](https://dev.digicert.com/md/trustcore-sdk/nanossl/get-started/understand-tcp-and-ssl-functions.md):  Reading from TCP Sockets: Blocking vs. Non-Blocking Modes When working with TCP sockets in NanoSSL, understanding the behavior of blocking versus non-blocking …
- [Quick start guide](https://dev.digicert.com/md/trustcore-sdk/nanossl/get-started/quick-start-guide.md): This guide will walk you through integrating DigiCert® NanoSSL and OpenSSL connector into your development environment. TAP flags configuration Select your TAP …
- [Multiple instances in a single process](https://dev.digicert.com/md/trustcore-sdk/nanossl/get-started/multiple-instances-in-a-single-process.md): Running multiple instances of NanoSSL servers within a single process can be beneficial for handling various services on different ports. This guide outlines …
- [Configure SSL handshake with mutual authentication](https://dev.digicert.com/md/trustcore-sdk/nanossl/get-started/configure-ssl-handshake-with-mutual-authentication.md): Establishing a secure SSL/TLS session often involves mutual authentication, where both the client and server authenticate each other. This topic outlines the …
- [Implement SSL certificate pinning](https://dev.digicert.com/md/trustcore-sdk/nanossl/get-started/implement-ssl-certificate-pinning.md): Guidance: As part of our commitment to delivering a fully RFC-compliant SSL/TLS stack, TrustCore SDK provides support for certificate pinning. This feature …
##### FAQs
- [How do I redirect debug output?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-redirect-debug-output.md): Question: How do I redirect the TrustCore SDK debug output so that it uses my custom debug API? Answer: Modify the dbgConsolePrint routine in the …
- [How do I support Microsoft IIS?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-support-microsoft-iis.md): Question: How do I configure my TrustCore SDK build flags so that SSL authentication works correctly with Microsoft IIS (Internet Information Services)? Answer: …
- [How do I use cookies for sharing callbacks?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-use-cookies-for-sharing-callbacks.md): Question: I’m using the TrustCore SDK source code in a shared library for both a client application and a server application. I want to create only one set of …
- [How can I reduce my code footprint?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-can-i-reduce-my-code-footprint.md): Question: How can I reduce the size of my compiled code? Answer: Here are some suggestions: Turn on compiler size optimization (for VS: “/O1”, for gcc: “-Os”). …
- [Can I use a VPN with NanoSSL?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/can-i-use-a-vpn-with-nanossl.md): Question: Does TrustCore SDK have an SSL VPN solution? Answer: No, but refer to the NanoSec Product Guide for information about TrustCore SDK’s IPSec VPN …
- [How do I get a secure socket?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-get-a-secure-socket.md): Question: Can I simply replace my code that opens an unsecure socket with an equivalent, but secure, routine from the TrustCore SDK code? Answer: No. A socket …
- [How is synchronous mode different from asynchronous?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-is-synchronous-mode-different-from-asynchronous.md): Question: What is the difference between synchronous and asynchronous communication? Answer: Synchronous communication occurs in a set order of operations. Data …
- [Do I need a client certificate?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/do-i-need-a-client-certificate.md): Question: My client device returns a certificate with a length of 0 when the server asks for a certificate. Will this be a problem for my NanoSSL server? …
- [Can I use a NULL certificate?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/can-i-use-a-null-certificate.md): Question: Can I input a NULL certificate to a NanoSSL server so I can still have encryption in situations where certificates are missing or bad? Answer: A NULL …
- [Does TrustCore SDK provide key and certificate conversion utilities?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/does-trustcore-sdk-provide-key-and-certificate-conversion-utilities.md): Question: Does TrustCore SDK provide any utilities for converting keys and certificates from one format to another? Answer: Yes, the following functions provide …
- [How are key BLOBs formatted?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-are-key-blobs-formatted.md): TrustCore SDK components use callback functions during authentication to verify public keys, which are managed as byte string representations of TrustCore SDK …
- [How do I configure mutual authentication?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-configure-mutual-authentication.md): Question: How do I configure either the NanoSSL client or NanoSSL server for mutual authentication? Answer: Both the NanoSSL client and NanoSSL server must be …
- [How do I enable weak ciphers for backwards compatibility?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-enable-weak-ciphers-for-backwards-compatibility.md): Question: How do I enable weak ciphers used for backwards compatibility? Answer: To enable or disable weak cipher suite(s), signature algorithms (with SHA-1 and …
- [How do I enable FIPS mode for NanoSSL?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-enable-fips-mode-for-nanossl.md): Question: How do I enable FIPS mode for NanoSSL at runtime? **Answer:**To enable or disable FIPS mode at runtime define the following build flags and runtime …
- [How do I generate and use PSK with TLS v1.3 in NanoSSL?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-generate-and-use-psk-with-tls-v-1-3-in-nanossl.md): Question: How do I generate and use PSK in TLS v1.3 in NanoSSL? Answer: To enable generation and use of PSK in TLS v1.3: Request a session ticket in the new …
- [How do I build NanoSSL for Windows?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-build-nanossl-for-windows.md): Question: How do I build NanoSSL for Windows? Answer: TrustCore SDK provides sample batch scripts to build the NanoSSL Client, NanoSSL Server, and the …
- [How do I build libraries using CMake projects?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-build-libraries-using-cmake-projects.md): Question: How do I build libraries using a CMake project? Answer: TrustCore SDK provides sample shell scripts to build the NanoSSL Client, NanoSSL Server, and …
- [How do I build libraries and NanoSSL application to use quantum safe algorithms?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-build-libraries-and-nanossl-application-to-use-quantum-safe-algorithms.md): Question: How do I build libraries and NanoSSL application to use quantum safe algorithms? Answer: TrustCore SDK provides sample shell scripts to build the …
- [Which key exchange curves are supported in NanoSSL?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/which-key-exchange-curves-are-supported-in-nanossl.md): Question: Which key exchange algorithms are supported in NanoSSL. Answer: TrustCore SDK provides support for the following key exchange algorithms (includes ED …
- [How do I use RSA TPM 2.0 private key with hardware providing incorrect RSA PSS signature padding for the TLS v1.3 PSS signing requirement?](https://dev.digicert.com/md/trustcore-sdk/nanossl/faqs/how-do-i-use-rsa-tpm-2-0-private-key-with-hardware-providing-incorrect-rsa-pss-signature-padding-for-the-tls-v-1-3-pss-signing-requirement.md): Question: How do I use RSA TPM2 Private key with HW providing incorrect PSS signature padding with TLS 1.3 negotiation? Answer: TLS 1.3 mandates using of …
#### NanoSec
DigiCert TrustCore SDK NanoSec is an integrated certificate management solution. It uses encryption technology to provide data confidentiality, integrity, and authenticity between participating peers …
- [FAQs](https://dev.digicert.com/md/trustcore-sdk/nanosec/faqs.md): This section provides solutions to common issues faced during NanoSec integration efforts. Can I use dead peer detection? Question: Does NanoSec support RFC …
##### Get started
- [Architecture](https://dev.digicert.com/md/trustcore-sdk/nanosec/get-started/architecture.md): NanoSec uses encryption technology to provide data confidentiality, integrity, and authenticity between participating peers in a private network. The NanoSec …
- [Use cases and policies](https://dev.digicert.com/md/trustcore-sdk/nanosec/get-started/use-cases-and-policies.md): TrustCore SDK NanoSec provides flexibility for an almost unlimited number of IPsec/IKE configurations. However, typical applications generally fall into one of …
##### Building and integrating NanoSec
- [Integration overview](https://dev.digicert.com/md/trustcore-sdk/nanosec/building-and-integrating-nanosec/integration-overview.md): Integrating NanoSec code into your devices or applications boosts security and efficiency. This straightforward process embeds advanced security protocols into …
- [Dynamic configuration](https://dev.digicert.com/md/trustcore-sdk/nanosec/building-and-integrating-nanosec/dynamic-configuration.md): An application should make appropriate calls for NanoSec IKE configuration and customization. The following calls should typically be placed after the call made …
- [Provisioning](https://dev.digicert.com/md/trustcore-sdk/nanosec/building-and-integrating-nanosec/provisioning.md): Provisioning entails setting up security policies and optionally adding manual keying between a device and peer. Security Policies TrustCore SDK NanoSec IPsec …
- [User-mode IPsec](https://dev.digicert.com/md/trustcore-sdk/nanosec/building-and-integrating-nanosec/user-mode-ipsec.md): This section outlines the setup and management of IPsec in user mode, including source files, build instructions, and execution steps. Source For user-mode …
- [Optimize NanoSec IPsec](https://dev.digicert.com/md/trustcore-sdk/nanosec/building-and-integrating-nanosec/optimize-nanosec-ipsec.md): This section discusses optimizing the NanoSec IPsec for better performance and security. It includes recommendations on buffer padding and MTU adjustments to …
- [Configure NanoSec IKE](https://dev.digicert.com/md/trustcore-sdk/nanosec/building-and-integrating-nanosec/configure-nanosec-ike.md): This section describes how to configure the NanoSec stack using automatic keys, how to populate the SADB (security association database), and how to request IKE …
- [Enhance NanoSec IKE capabilities](https://dev.digicert.com/md/trustcore-sdk/nanosec/building-and-integrating-nanosec/enhance-nanosec-ike-capabilities.md): This section outlines methods to enhance the capabilities of NanoSec IKE, focusing on improving performance for high-load environments and large-scale …
- [NanoSec policy scripts syntax](https://dev.digicert.com/md/trustcore-sdk/nanosec/building-and-integrating-nanosec/nanosec-policy-scripts-syntax.md): TrustCore SDK NanoSec policy scripts are text files created to configure IPsec policies and commands. Using these scripts is an easier alternative to manually …
#### NanoTAP
NanoTAP™ is the Trust Anchor Platform (TAP) component of TrustCore SDK. The NanoTAP module provides an extensible architecture that enables applications to establish hardware- or software-based trust …
- [Get started](https://dev.digicert.com/md/trustcore-sdk/nanotap/get-started.md): This documentation describes NanoTAP – its features, important design considerations, and guidance for application programmers incorporating NanoTAP into their …
- [NanoTAP architecture](https://dev.digicert.com/md/trustcore-sdk/nanotap/nanotap-architecture.md): The NanoTAP architecture allows applications to leverage functionality offered by a hardware or software root of trust (e.g., TPM, Virtual TPM, ARM® Trusted …
- [Compile flags and build targets](https://dev.digicert.com/md/trustcore-sdk/nanotap/compile-flags-and-build-targets.md): Compile flags The following compiler flags have been added for NanoTAP: __ENABLE_DIGICERT_TAP__ __ENABLE_TAP_REMOTE__ __ENABLE_UNICODE__ …
##### Interface level design
- [TAP layer](https://dev.digicert.com/md/trustcore-sdk/nanotap/interface-level-design/tap-layer.md): The primary layer for NanoTAP is the TAP layer, which resides in the ${TRUSTCORE_ROOT}/src/crypto/tap folder. The TAP layer is a thin layer of code that …
- [TAP APIs](https://dev.digicert.com/md/trustcore-sdk/nanotap/interface-level-design/tap-apis.md): The NanoTAP API Reference provides information about the vendor and platform agnostic APIs exposed to applications. Unless otherwise specified, all functions …
- [Security module dependencies](https://dev.digicert.com/md/trustcore-sdk/nanotap/interface-level-design/security-module-dependencies.md): TAP relies on the existence of a statically known dispatcher function for every SMP. Refer to the SMP guidelines for the expected signature of the dispatcher. …
- [TAP server](https://dev.digicert.com/md/trustcore-sdk/nanotap/interface-level-design/tap-server.md): The TAP server (TAPS) runs as a service. On startup, the TAP server parses its configuration file and generates a list of security modules supported on that …
- [Remote access](https://dev.digicert.com/md/trustcore-sdk/nanotap/interface-level-design/remote-access.md): Secure remote NanoTAP access is provided over secure socket layer (SSL) transport using mutual (client/server) X.509v3 certificates between the TAP client and …
#### NanoSMP
The NanoSMP (Security Module Plugin) connector defines a provider interface layer for Secure Elements (SE) to integrate with NanoTAP (Trust Anchor Platform). The NanoTAP layer provides transport …
##### NanoSMP for TPM 2.0
#### NanoCAP
NanoCAP abstracts cryptographic operations so applications can use operator-based crypto implementations.
- [Before you begin](https://dev.digicert.com/md/trustcore-sdk/nanocap/before-you-begin.md): To better understand this documentation, review the following commonly used terms: NanoCAP: An API layer that requests specific cryptographic operations to be …
- [NanoCAP operators](https://dev.digicert.com/md/trustcore-sdk/nanocap/nanocap-operators.md): An operator is a pluggable, cryptographic implementation that fulfills algorithm-specific requests made by NanoCAP. There are two types of operators, symmetric …
- [Crypto operators](https://dev.digicert.com/md/trustcore-sdk/nanocap/crypto-operators.md): Crypto operators are components that perform specific cryptographic operations. These operators are important elements in cryptographic systems and libraries …
- [Get started](https://dev.digicert.com/md/trustcore-sdk/get-started.md): This guide provides a general overview to get you started using DigiCert®TrustCore SDK on various Linux systems. Ensure your host system meets the system …
- [NanoROOT](https://dev.digicert.com/md/trustcore-sdk/nanoroot.md): NanoROOT is DigiCert® hardware-anchored security solution for embedded devices, built on TrustCore SDK (FIPS-certified, hardened, and field-tested for over a …
- [API reference](https://dev.digicert.com/md/trustcore-sdk/api-reference.md): Use the following links to access API references for the listed TrustCore SDK module. Module Version Crypto Interface 2.0 NanoCert 7.0 NanoCrypto 7.0 NanoSec …
- [Release notes](https://dev.digicert.com/md/trustcore-sdk/release-notes.md): TrustCore SDK v9.0.0 The DigiCert® TrustCore SDK is now open source - production‑proven IoT security for everyone. TrustCore SDK version v9.0.0 is now available …
## Other resources
### Partner Subscriptions
The Partner Subscriptions API lets you manage partner subscriptions accounts, API keys, ACME contracts, emergency contact emails, account reporting, and billing account links. What you can do Manage …
- [Overview](https://dev.digicert.com/md/partner-subscriptions-api.md): Manage accounts, API keys, ACME contracts, reporting, and billing links.
#### API key management
Use the API Key Management endpoints to manage API keys for a partner subscriptions account. These endpoints let you list the API keys accessible to the authenticated account, retrieve a single API …
- [POST /partner-subscription/api/v1/api-key/account/<accountId>](https://dev.digicert.com/md/partner-subscriptions-api/api-key-management/create-api-key-for-subaccount.md): Create API key for subaccount
- [GET /partner-subscription/api/v1/api-key](https://dev.digicert.com/md/partner-subscriptions-api/api-key-management/list-api-keys.md): List API keys
- [PUT /partner-subscription/api/v1/api-key/<apiKeyId>/status](https://dev.digicert.com/md/partner-subscriptions-api/api-key-management/update-api-key-status.md): Update API key status
- [GET /partner-subscription/api/v1/api-key/<apiKeyId>](https://dev.digicert.com/md/partner-subscriptions-api/api-key-management/retrieve-api-key.md): Retrieve API key
#### ACME contract management
Use the ACME Contract Management endpoints to create and manage ACME contracts for automated SSL/TLS certificate provisioning. These endpoints let you create ACME contracts, retrieve contract details, …
- [POST /partner-subscription/api/v1/acme](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/create-acme-contract.md): Create ACME contract
- [PUT /partner-subscription/api/v1/acme/<acme_contract_id>](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/update-acme-contract.md): Update ACME contract
- [PATCH /partner-subscription/api/v1/acme/<acme_contract_id>](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/partial-update-acme-contract.md): Partially update ACME contract
- [GET /partner-subscription/api/v1/acme/<acme_contract_id>](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/get-acme-contract-details.md): Get ACME contract details
- [DELETE /partner-subscription/api/v1/acme/<acme_contract_id>](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/cancel-acme-contract.md): Cancel ACME contract
- [GET /partner-subscription/api/v1/acme/<acme_contract_id>/certificates](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/list-acme-contract-certificates.md): List ACME contract certificates
- [PUT /partner-subscription/api/v1/acme/<acme_contract_id>/sans](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/add-sans-to-acme-contract.md): Add SANs to ACME contract
- [DELETE /partner-subscription/api/v1/acme/<acme_contract_id>/sans](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/remove-sans-from-acme-contract.md): Remove SANs from ACME contract
- [GET /partner-subscription/api/v1/acme/<acme_contract_id>/credentials](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/list-acme-credentials.md): List ACME credentials
- [POST /partner-subscription/api/v1/acme/<acme_contract_id>/credentials/regenerate](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/regenerate-acme-credentials.md): Regenerate ACME credentials
- [POST /partner-subscription/api/v1/acme/<acme_contract_id>/credentials/revoke](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/revoke-all-active-acme-credentials.md): Revoke all active ACME credentials
- [POST /partner-subscription/api/v1/acme/<acme_contract_id>/credentials/revoke/<credential_id>](https://dev.digicert.com/md/partner-subscriptions-api/acme-contract-management/revoke-an-acme-credential.md): Revoke an ACME credential
#### Account management
Use the Account Management endpoints to create subaccounts, manage emergency contact email addresses, and retrieve ACME contract reporting for subaccounts. For an overview of the Partner Subscriptions …
- [GET /partner-subscription/api/v1/account/settings](https://dev.digicert.com/md/partner-subscriptions-api/account-management/list-account-settings.md): List account settings
- [PATCH /partner-subscription/api/v1/account/settings](https://dev.digicert.com/md/partner-subscriptions-api/account-management/update-account-settings.md): Update account setting
- [POST /partner-subscription/api/v1/account/subaccount](https://dev.digicert.com/md/partner-subscriptions-api/account-management/create-subaccount-with-api-key.md): Create subaccount with API key
- [GET /partner-subscription/api/v1/account/reporting](https://dev.digicert.com/md/partner-subscriptions-api/account-management/get-acme-contract-reporting-subaccount.md): Get ACME contract reporting by subaccount
- [PUT /partner-subscription/api/v1/account/emergency-emails](https://dev.digicert.com/md/partner-subscriptions-api/account-management/add-emergency-contact-emails.md): Add emergency contact emails
- [GET /partner-subscription/api/v1/account/emergency-emails](https://dev.digicert.com/md/partner-subscriptions-api/account-management/list-emergency-contact-emails.md): List emergency contact emails
- [DELETE /partner-subscription/api/v1/account/emergency-emails](https://dev.digicert.com/md/partner-subscriptions-api/account-management/remove-emergency-contact-emails.md): Remove emergency contact emails
#### Finance management
Use the Finance Management endpoint to link a DigiCert CertCentral® billing account to the authenticated Partner Subscriptions account. For an overview of the Partner Subscriptions API, see Partner …
- [PUT /partner-subscription/api/v1/finance/account-link](https://dev.digicert.com/md/partner-subscriptions-api/finance-management/link-cc-billing-account.md): Link CertCentral billing account
- [Partner subscriptions workflow](https://dev.digicert.com/md/partner-subscriptions-api/partner-subscription-workflow.md): Use this workflow to create a customer subaccount and provision an ACME subscription for that customer. Workflow Create a subaccount for the end customer. …
- [Glossary](https://dev.digicert.com/md/partner-subscriptions-api/glossary.md): Supported products (product_name_id) DV products product_name_id Product name ssl_dv_rapidssl RapidSSL DV Subscription ssl_dv_geotrust_flex GeoTrust DV …