POST /api/v1/pki/ca/:caId/sign-intermediate — infisical-api

v6

latestOpenAPI 3.0.32026-08-082,281012.1 MB

PKI Certificate Authorities

Create intermediate CA certificate from parent CA

post/api/v1/pki/ca/{caId}/sign-intermediate

Path parameters

caIdstring required

The ID of the CA to sign the intermediate certificate with.

Request body

csrstring required

The pem-encoded CSR to sign with the CA.

notBeforestring

The date and time when the intermediate CA becomes valid in YYYY-MM-DDTHH:mm:ss.sssZ format.

notAfterstring required

The date and time when the intermediate CA expires in YYYY-MM-DDTHH:mm:ss.sssZ format.

maxPathLengthnumber

The maximum number of intermediate CAs that may follow this CA in the certificate / CA chain. A maxPathLength of -1 implies no path limit on the chain.

Response

Default Response

certificatestring required

The signed intermediate certificate.

certificateChainstring required

The certificate chain of the intermediate certificate.

issuingCaCertificatestring required

The certificate of the issuing CA.

serialNumberstring required

The serial number of the intermediate certificate.