---
title: "POST /create-certificate"
method: POST
path: "/create-certificate"
tags: ["v2"]
---

# POST /create-certificate

`POST /create-certificate`

## Request body

- CreateCertificate
  - `certificate-data` string — Content of the certificate in a Base64 format.
  - `delete_protection` string — Protection from accidental deletion of this object [true/false]
  - `description` string — Description of the object
  - `expiration-event-in` string[] — How many days before the expiration of the certificate would you like to be notified.
  - `format` string — CertificateFormat of the certificate and private key, possible values: cer,crt,pem,pfx,p12. Required when passing inline certificate content with --certificate-data or --key-data, otherwise format is derived from the file extension.
  - `item-custom-fields` object — Additional custom fields to associate with the item
  - `json` boolean — Set output format to JSON
  - `key` string — The name of a key to use to encrypt the certificate's key (if empty, the account default protectionKey key will be used)
  - `key-data` string — Content of the certificate's private key in a Base64 format.
  - `metadata` string — Deprecated - use description
  - `name` string, required — Certificate name
  - `tags` string[] — Add tags attached to this object
  - `token` string — Authentication token (see `/auth` and `/configure`)
  - `uid-token` string — The universal identity token, Required only for universal_identity authentication

## Response `200`

createCertificateResponse wraps response body.

- CreateCertificateOutput
  - `name` string

## Other responses

- `default` — errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.net/akeyless/apis/akeyless-api.md) · [All operations](https://skmtc.net/akeyless/apis/akeyless-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/akeyless/akeyless-api/versions/0ceb25634501/schema)