---
title: "POST /api/v1/pki/certificates/issue-certificate"
method: POST
path: "/api/v1/pki/certificates/issue-certificate"
tags: ["PKI Certificates"]
---

# POST /api/v1/pki/certificates/issue-certificate

`POST /api/v1/pki/certificates/issue-certificate`

Issue certificate

## Request body

- object
  - `caId` string — The ID of the CA to issue the certificate from.
  - `certificateTemplateId` string — The ID of the certificate template to issue the certificate from.
  - `pkiCollectionId` string — The ID of the PKI collection to add the certificate to.
  - `friendlyName` string — A friendly name for the certificate.
  - `commonName` string, required — The common name (CN) for the certificate.
  - `altNames` string — A comma-delimited list of Subject Alternative Names (SANs) for the certificate; these can be host names or email addresses.
  - `ttl` string, required — The time to live for the certificate such as 1m, 1h, 1d, 1y, ...
  - `notBefore` string — The date and time when the certificate becomes valid in YYYY-MM-DDTHH:mm:ss.sssZ format.
  - `notAfter` string — The date and time when the certificate expires in YYYY-MM-DDTHH:mm:ss.sssZ format.
  - `keyUsages` string[] — The key usage extension of the certificate.
  - `extendedKeyUsages` string[] — The extended key usage extension of the certificate.

## Response `200`

Default Response

- object
  - `certificate` string, required — The issued certificate.
  - `issuingCaCertificate` string, required — The certificate of the issuing CA.
  - `certificateChain` string, required — The certificate chain of the issued certificate.
  - `privateKey` string, required — The private key of the issued certificate.
  - `serialNumber` string, required — The serial number of the issued certificate.

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/885aef3e6c11/schema)