---
title: "Duplicate certificate"
source_url: https://dev.digicert.com/certcentral-apis/services-api/orders/duplicate-certificate.html
api_method: POST
api_endpoint: "/services/v2/order/certificate/{{order_id}}/duplicate"
api_url: "https://www.digicert.com/services/v2/order/certificate/{{order_id}}/duplicate"
---

**POST** `https://www.digicert.com/services/v2/order/certificate/{{order_id}}/duplicate`

Use this endpoint to request a duplicate certificate for an order.

- All certificate fields must be identical to the original, with the exception of the CSR, certificate validity, server platform, and signature hash.
- When duplicating a multi-domain certificate, you can move a SAN to the common name if desired.
- When duplicating a wildcard certificate, you can add SANs as long as they are subdomains of the wildcard.


> **Important**
>
> **End of 2-year public SSL/TLS certificates**
>
> The Services API no longer issues public SSL/TLS certificates with a validity period greater than 397 days.
>
> When you duplicate a certificate that has a validity greater than 397 days, the validity period of the duplicated certificate is shortened to 397 days or to the time that remains on the order, whichever is sooner. To use the remaining validity included with the original certificate order, request new duplicate certificates during the order's final 397-day period.
>
> To learn more about this change, see <a href="https://docs.digicert.com/en/certcentral/manage-certificates/end-of-2-year-dv--ov--and-ev-public-ssl-tls-certificates.html" target="_blank" rel="noopener noreferrer">End of 2-year DV, OV, EV public TLS/SSL certificates</a>.


## Example requests and responses

**cURL**

```bash
curl -X POST \
  'https://www.digicert.com/services/v2/order/certificate/{{order_id}}/duplicate' \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
  -d '{
  "certificate": {
    "common_name": "example.com",
    "dns_names": [
      "sub.example.com"
    ],
    "csr": "<csr>",
    "server_platform": {
      "id": 45
    },
    "signature_hash": "sha256"
  }
}'
```

**Python**

```python
import requests

url = "https://www.digicert.com/services/v2/order/certificate/{{order_id}}/duplicate"

payload = "{\n  \"certificate\": {\n    \"common_name\": \"example.com\",\n    \"dns_names\": [\n      \"sub.example.com\"\n    ],\n    \"csr\": \"<csr>\",\n    \"server_platform\": {\n      \"id\": 45\n    },\n    \"signature_hash\": \"sha256\"\n  }\n}"
headers = {
    'X-DC-DEVKEY': "{{api_key}}",
    'Content-Type': "application/json"
    }

response = requests.request("POST", url, data=payload, headers=headers)

print(response.text)
```

**Go**

```go
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://www.digicert.com/services/v2/order/certificate/{{order_id}}/duplicate"

	payload := strings.NewReader("{\n  \"certificate\": {\n    \"common_name\": \"example.com\",\n    \"dns_names\": [\n      \"sub.example.com\"\n    ],\n    \"csr\": \"<csr>\",\n    \"server_platform\": {\n      \"id\": 45\n    },\n    \"signature_hash\": \"sha256\"\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-DC-DEVKEY", "{{api_key}}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

**NodeJS**

```javascript
var request = require("request");

var options = { method: 'POST',
  url: 'https://www.digicert.com/services/v2/order/certificate/{{order_id}}/duplicate',
  headers: 
   { 'Content-Type': 'application/json',
     'X-DC-DEVKEY': '{{api_key}}' },
  body: 
   { certificate: 
      { common_name: 'example.com',
        dns_names: [ 'sub.example.com' ],
        csr: '<csr>',
        server_platform: { id: 45 },
        signature_hash: 'sha256' } },
  json: true };

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});
```


**201 Created**

```json
{
  "id": 112233,
  "requests": [
    {
      "id": 332211
    }
  ]
}
```

**201 Created (validation complete)**

```json
{
  "id": 1234567,
  "certificate_id": 987654321,
  "certificate_chain": [
    {
      "subject_common_name": "www.digicert.com",
      "pem": "<pem_encoded_certificate>"
    },
    {
      "subject_common_name": "DigiCert SHA2 Extended Validation Server CA",
      "pem": "<pem_encoded_certificate>"
    },
    {
      "subject_common_name": "DigiCert High Assurance EV Root CA",
      "pem": "<pem_encoded_certificate>"
    }
  ]
}
```


## Request parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>certificate</td>
<td>required</td>
<td>object</td>
<td>Details about the certificate.</td>
</tr>
<tr>
<td>.. common_name</td>
<td>required</td>
<td>string</td>
<td>Domain to be secured.</td>
</tr>
<tr>
<td>.. dns_names</td>
<td>optional</td>
<td>array</td>
<td>Additional domains to be secured.</td>
</tr>
<tr>
<td>.. csr</td>
<td>required</td>
<td>string</td>
<td>Certificate signing request (CSR). See Glossary – CSR requirements.</td>
</tr>
<tr>
<td>.. server_platform</td>
<td>optional</td>
<td>object</td>
<td>Server platform type.<br>Required for code signing certificate orders.<br>Default: -1 (other)</td>
</tr>
<tr>
<td>.. .. id</td>
<td>required</td>
<td>int</td>
<td>Server platform ID. See Glossary – Server platforms.</td>
</tr>
<tr>
<td>.. signature_hash</td>
<td>required</td>
<td>string</td>
<td>Hash algorithm used to sign the certificate.</td>
</tr>
<tr>
<td>.. ca_cert_id</td>
<td>optional</td>
<td>string</td>
<td>ID of the intermediate certificate authority (ICA) certificate to select as the issuing certificate. To get the <code>ca_cert_id</code> value for an ICA, use the <a href="https://dev.digicert.com/md/certcentral-apis/services-api/products/product-list.md">Product list</a> endpoint.<br>Account administrators can customize the default and allowed ICAs for each product at the container or user role level. If you do not provide a value for this parameter, we issue the certificate using the default ICA. If you provide the <code>ca_cert_id</code> value for an ICA that is not allowed, the request returns an error<sup>*</sup>. To see the custom ICA settings for each product, use the <a href="https://dev.digicert.com/md/certcentral-apis/services-api/containers/product-limits.md">Product limits</a> endpoint.<br>*This parameter is ignored if the option for ICA selection is not enabled for your account. For more information, see ICA certificate chain selection.</td>
</tr>
<tr>
<td>custom_expiration_date</td>
<td>optional</td>
<td>string</td>
<td>A custom expiration date for the certificate.<br>Defines the validity period of the duplicate certificate. If not provided, the validity period for the duplicate certificate defaults to the time remaining of the certificate being duplicated.<br>We automatically truncate the certificate validity if you exceed the time remaining in the order, Multi-year Plan, or the maximum 397-day certificate validity period defined by CA/B Forum baseline requirements, whichever is shorter.</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>id</td>
<td>int</td>
<td>Order ID.</td>
</tr>
<tr>
<td>requests</td>
<td>array</td>
<td>List of requests.</td>
</tr>
<tr>
<td>..  id</td>
<td>int</td>
<td>Request ID.</td>
</tr>
<tr>
<td>certificate_id</td>
<td>int</td>
<td>ID of the issued duplicate certificate.</td>
</tr>
<tr>
<td>certificate_chain</td>
<td>array</td>
<td>Certificate chain list.</td>
</tr>
<tr>
<td>.. subject_common_name</td>
<td>string</td>
<td>Common name on the certificate.</td>
</tr>
<tr>
<td>.. pem</td>
<td>string</td>
<td>PEM encoded certificate.<br><strong>Note:</strong> The <code>pem</code> response parameter includes newline characters <code>\r\n</code>, which are an inherent part of PEM-encoded certificates.</td>
</tr>
</tbody>
</table>