---
title: "Renew active certificate"
method: POST
path: "/v1/certificates/{certificateId}/renew"
tags: ["v1"]
---

# Renew active certificate

`POST /v1/certificates/{certificateId}/renew`

Renewal is the process by which the validity of a certificate is extended. Renewal is only available 60 days prior to expiration of the previous certificate and 30 days after the expiration of the previous certificate. The renewal supports modifying a set of the original certificate order information. Once a request is validated and approved, the certificate will be issued with extended validity. Since subject alternative names can be removed during a renewal, we require that you provide the subject alternative names you expect in the renewed certificate. New names added to a certificate that do not share the base domain of the common name may take additional time to validate. </p>

## Path parameters

- `certificateId` string, required

## Request body

- CertificateRenew
  - `callbackUrl` string — Required if client would like to receive stateful actions via callback during certificate lifecyle
  - `commonName` string — The common name of certificate to be secured
  - `csr` string — Certificate Signing Request.
  - `period` integer — Number of years for certificate validity period, if different from previous certificate
  - `rootType` 'GODADDY_SHA_1' | 'GODADDY_SHA_2' | 'STARFIELD_SHA_1' | 'STARFIELD_SHA_2' — Root Type. Depending on certificate expiration date, SHA_1 not be allowed. Will default to SHA_2 if expiration date exceeds sha1 allowed date
  - `subjectAlternativeNames` string[] — Only used for UCC products. An array of subject alternative names to include in certificate. Not including a subject alternative name that was in the previous certificate will remove it from the renewed certificate.

## Response `202`

Renew request created

## Other responses

- `400` — Request was malformed
- `401` — Authentication info not sent or invalid
- `403` — Authenticated user is not allowed access
- `404` — Certificate id not found
- `409` — Certificate state does not allow renew
- `422` — `csr` is invalid
- `500` — Internal server error

---

[API](https://skmtc.net/godaddy/apis/untitled-api-2.md) · [All operations](https://skmtc.net/godaddy/apis/untitled-api-2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/godaddy/untitled-api-2/versions/100b3aa2d7ee/schema)