---
title: "POST /sign-pki-cert-with-classic-key"
method: POST
path: "/sign-pki-cert-with-classic-key"
tags: ["v2"]
---

# POST /sign-pki-cert-with-classic-key

`POST /sign-pki-cert-with-classic-key`

## Request body

- SignPKICertWithClassicKey
  - `common-name` string — The common name to be included in the PKI certificate
  - `country` string — A comma-separated list of the country that will be set in the issued certificate
  - `display-id` string, required — The name of the key to use in the sign PKI Cert process
  - `dns-names` string — DNS Names to be included in the PKI certificate (in a comma-delimited list)
  - `json` boolean — Set output format to JSON
  - `key-usage` string — key-usage
  - `locality` string — A comma-separated list of the locality that will be set in the issued certificate
  - `organizational-units` string — A comma-separated list of organizational units (OU) that will be set in the issued certificate
  - `organizations` string — A comma-separated list of organizations (O) that will be set in the issued certificate
  - `postal-code` string — A comma-separated list of the postal code that will be set in the issued certificate
  - `province` string — A comma-separated list of the province that will be set in the issued certificate
  - `public-key-pem-data` string — PublicKey using for signing in a PEM format.
  - `signing-method` string, required — SigningMethod
  - `street-address` string — A comma-separated list of the street address that will be set in the issued certificate
  - `token` string — Authentication token (see `/auth` and `/configure`)
  - `ttl` integer, required — he requested Time To Live for the certificate, in seconds
  - `uid-token` string — The universal identity token, Required only for universal_identity authentication
  - `uri-sans` string — The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
  - `version` integer, required — classic key version

## Response `200`

signPKICertWithClassicKeyResponse wraps response body.

- SignPKICertOutput
  - `result` string

## Other responses

- `default` — errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.net/akeyless/apis/akeyless-api.md) · [All operations](https://skmtc.net/akeyless/apis/akeyless-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/akeyless/akeyless-api/revisions/0ceb25634501/schema)