---
title: "Allows the current identity to validate reciept of a new client certificate"
method: POST
path: "/current-identity/authenticators/{id}/extend-verify"
tags: ["Current API Session", "Enroll", "Extend Enrollment"]
---

# Allows the current identity to validate reciept of a new client certificate

`POST /current-identity/authenticators/{id}/extend-verify`

After submitting a CSR for a new client certificate the resulting public certificate must be re-submitted to this endpoint to verify receipt.
After receipt, the new client certificate must be used for new authentication requests.

## Path parameters

- `id` string, required

## Request body

- IdentityExtendValidateEnrollmentRequest
  - `clientCert` string, required — A PEM encoded client certificate previously returned after an extension request

## Response `200`

Base empty response

- Empty
  - `data` object, required
  - `meta` Meta, required
    - `apiEnrollmentVersion` string
    - `apiVersion` string
    - `filterableFields` string[]
    - `pagination` Pagination
      - `limit` number, required
      - `offset` number, required
      - `totalCount` number, required

## Other responses

- `401` — The supplied session does not have the correct access rights to request this resource

---

[API](https://skmtc.net/openziti/apis/ziti-edge-client.md) · [All operations](https://skmtc.net/openziti/apis/ziti-edge-client/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openziti/ziti-edge-client/versions/25da9a73a095/schema)