---
title: "POST /api/v1/cert-manager/signers/{signerId}/certificate/reissue"
method: POST
path: "/api/v1/cert-manager/signers/{signerId}/certificate/reissue"
tags: ["PKI Signers"]
---

# POST /api/v1/cert-manager/signers/{signerId}/certificate/reissue

`POST /api/v1/cert-manager/signers/{signerId}/certificate/reissue`

Re-issue the signer's certificate (optionally from a different CA or with a different key source)

## Path parameters

- `signerId` string, uuid, required

## Request body

- object
  - `caId` string, uuid, required
  - `commonName` string
  - `certificateTtlDays` integer
  - `keyAlgorithm` 'RSA_2048' | 'RSA_3072' | 'RSA_4096' | 'EC_prime256v1' | 'EC_secp384r1' | 'EC_secp521r1'
  - `certificate` object
    - `keySource` 'infisical' | 'hsm', required
    - `hsmConnectorId` string, uuid
  - `externalConfiguration` union
    - object
      - `caType` 'digicert', required
      - `reissueFromExternalOrderId` string — Reissue into this existing DigiCert order instead of placing a new order (reuses the subscription slot).
    - object
      - `caType` 'adcs', required
      - `template` string — The AD CS certificate template this signer requests when issuing (e.g. a code-signing template).

## Response `200`

Default Response

- object
  - `id` string, uuid, required
  - `name` string, required
  - `description` string, nullable
  - `status` string
  - `certificateId` string, uuid, nullable
  - `approvalPolicyId` string, uuid, nullable
  - `lastSignedAt` string, date-time, nullable
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required
  - `caId` string, uuid, nullable
  - `commonName` string, nullable
  - `certificateTtlDays` number, nullable
  - `certificateRenewBeforeDays` number, nullable
  - `certificateFailureReason` string, nullable
  - `keyAlgorithm` string
  - `externalCaConfig` unknown

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/revisions/f10a4f8c1d41/schema)