---
title: "Create a pending order for certificate"
method: POST
path: "/v1/certificates"
tags: ["v1"]
---

# Create a pending order for certificate

`POST /v1/certificates`

Creating a certificate order can be a long running asynchronous operation in the PKI workflow. The PKI API supports 2 options for getting the completion stateful actions for this asynchronous operations: 1) by polling operations -- see /v1/certificates/{certificateId}/actions 2) via WebHook style callback -- see '/v1/certificates/{certificateId}/callback'.

## Headers

- `X-Market-Id` string

## Request body

- CertificateCreate
  - `callbackUrl` string — Required if client would like to receive stateful actions via callback during certificate lifecyle
  - `commonName` string — Name to be secured in certificate. If provided, CN field in CSR will be ignored.
  - `contact` CertificateContact, required
    - `email` string, required — Email address of requestor contact
    - `jobTitle` string — Only used for EVSSL. Job title of requestor contact
    - `nameFirst` string, required — First name of requestor contact
    - `nameLast` string, required — Last name of requestor contact
    - `nameMiddle` string — Middle initial of requestor contact
    - `phone` string, required — Phone number for requestor contact
    - `suffix` string — Suffix of requestor contact
  - `csr` string, required — Certificate Signing Request
  - `intelVPro` boolean — Only used for OV
  - `organization` CertificateOrganizationCreate
    - `address` CertificateAddress
      - `address1` string, required — Address line 1 of organization address
      - `address2` string — Address line 2 of organization address
      - `city` string — City/Locality of organization address
      - `country` 'AC' | 'AD' | 'AE' | 'AF' | 'AG' | 'AI' | 'AL' | 'AM' | 'AN' | 'AO' | 'AQ' | 'AR' | 'AS' | 'AT' | 'AU' | 'AW' | 'AZ' | 'BA' | 'BB' | 'BD' | 'BE' | 'BF' | 'BG' | 'BH' | 'BI' | 'BJ' | 'BM' | 'BN' | 'BO' | 'BR' | 'BS' | 'BT' | 'BV' | 'BW' | 'BY' | 'BZ' | 'CA' | 'CC' | 'CD' | 'CF' | 'CG' | 'CH' | 'CI' | 'CK' | 'CL' | 'CM' | 'CN' | 'CO' | 'CR' | 'CV' | 'CX' | 'CY' | 'CZ' | 'DE' | 'DJ' | 'DK' | 'DM' | 'DO' | 'DZ' | 'EC' | 'EE' | 'EG' | 'EH' | 'ER' | 'ES' | 'ET' | 'FI' | 'FJ' | 'FK' | 'FM' | 'FO' | 'FR' | 'GA' | 'GB' | 'GD' | 'GE' | 'GF' | 'GG' | 'GH' | 'GI' | 'GL' | 'GM' | 'GN' | 'GP' | 'GQ' | 'GR' | 'GS' | 'GT' | 'GU' | 'GW' | 'GY' | 'HK' | 'HM' | 'HN' | 'HR' | 'HT' | 'HU' | 'ID' | 'IE' | 'IL' | 'IM' | 'IN' | 'IO' | 'IQ' | 'IS' | 'IT' | 'JE' | 'JM' | 'JO' | 'JP' | 'KE' | 'KG' | 'KH' | 'KI' | 'KM' | 'KN' | 'KR' | 'KW' | 'KY' | 'KZ' | 'LA' | 'LB' | 'LC' | 'LI' | 'LK' | 'LR' | 'LS' | 'LT' | 'LU' | 'LV' | 'LY' | 'MA' | 'MC' | 'MD' | 'ME' | 'MG' | 'MH' | 'ML' | 'MM' | 'MN' | 'MO' | 'MP' | 'MQ' | 'MR' | 'MS' | 'MT' | 'MU' | 'MV' | 'MW' | 'MX' | 'MY' | 'MZ' | 'NA' | 'NC' | 'NE' | 'NF' | 'NG' | 'NI' | 'NL' | 'NO' | 'NP' | 'NR' | 'NU' | 'NZ' | 'OM' | 'PA' | 'PE' | 'PF' | 'PG' | 'PH' | 'PK' | 'PL' | 'PM' | 'PN' | 'PR' | 'PS' | 'PT' | 'PW' | 'PY' | 'QA' | 'RE' | 'RO' | 'RS' | 'RU' | 'RW' | 'SA' | 'SB' | 'SC' | 'SE' | 'SG' | 'SH' | 'SI' | 'SJ' | 'SK' | 'SL' | 'SM' | 'SN' | 'SO' | 'SR' | 'ST' | 'SV' | 'SZ' | 'TC' | 'TD' | 'TF' | 'TG' | 'TH' | 'TJ' | 'TK' | 'TL' | 'TM' | 'TN' | 'TO' | 'TP' | 'TR' | 'TT' | 'TV' | 'TW' | 'TZ' | 'UA' | 'UG' | 'UM' | 'US' | 'UY' | 'UZ' | 'VA' | 'VC' | 'VE' | 'VG' | 'VI' | 'VN' | 'VU' | 'WF' | 'WS' | 'YE' | 'YT' | 'YU' | 'ZA' | 'ZM' | 'ZW', iso-country-code, required — Two character country code of organization
      - `postalCode` string — Postal code of organization address
      - `state` string — Full name of State/Province/Territory of organization address
    - `assumedName` string — Only for EVSSL. The DBA(does business as) name for the organization.
    - `name` string, required — Name of organization that owns common name
    - `phone` string, required — Phone number for organization
    - `registrationAgent` string — Only for EVSSL.
    - `registrationNumber` string — Only for EVSSL.
  - `period` integer, required — Number of years for certificate validity period
  - `productType` 'DV_SSL' | 'DV_WILDCARD_SSL' | 'EV_SSL' | 'OV_CS' | 'OV_DS' | 'OV_SSL' | 'OV_WILDCARD_SSL' | 'UCC_DV_SSL' | 'UCC_EV_SSL' | 'UCC_OV_SSL', required — Type of product requesting a certificate. Only required non-renewal
  - `rootType` 'GODADDY_SHA_1' | 'GODADDY_SHA_2' | 'STARFIELD_SHA_1' | 'STARFIELD_SHA_2' — Root Type. Depending on certificate expiration date, SHA_1 not be allowed. Will default to SHA_2 if expiration date exceeds sha1 allowed date
  - `slotSize` 'FIVE' | 'TEN' | 'FIFTEEN' | 'TWENTY' | 'THIRTY' | 'FOURTY' | 'FIFTY' | 'ONE_HUNDRED' — Number of subject alternative names(SAN) to be included in certificate
  - `subjectAlternativeNames` string[] — Subject Alternative names. Collection of subjectAlternativeNames to be included in certificate.

## Response `202`

Request was successful

- CertificateIdentifier
  - `certificateId` string, required — The unique identifier of the certificate request. Only present if verified.

## Other responses

- `400` — Request was malformed
- `401` — Authentication info not sent or invalid
- `403` — Authenticated user is not allowed access
- `409` — Certificate state does not allow renew
- `422` — `email` is not empty<br>`csr` is invalid
- `500` — Internal server error

---

[API](https://skmtc.net/godaddy/apis/untitled-api-2.md) · [All operations](https://skmtc.net/godaddy/apis/untitled-api-2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/godaddy/untitled-api-2/versions/100b3aa2d7ee/schema)