---
title: "Create certificate"
method: POST
path: "/api/certificates"
tags: ["Certificates"]
---

# Create certificate

`POST /api/certificates`

Creates a new certificate with the provided details

## Request body

- CertificateCommandDTO — Command DTO for creating or updating a certificate. Used as the request body for certificate creation/update endpoints.
  - `name` string, required — The name of the certificate.
  - `description` string, required — A description of the certificate's purpose or usage.
  - `regenerateCertificate` boolean, required — Whether to regenerate the certificate.
  - `options` CertificateOptions, required — Options for generating a certificate. Used to specify details for certificate generation.
    - `commonName` string, required — The common name (e.g., domain name) for the certificate.
    - `countryName` string, required — The country name for the certificate.
    - `stateOrProvinceName` string, required — The state or province name for the certificate.
    - `localityName` string, required — The locality (e.g., city) name for the certificate.
    - `organizationName` string, required — The organization name for the certificate.
    - `keySize` number, double, required — The key size in bits for the certificate.
    - `daysBeforeExpiry` number, double, required — The number of days before the certificate expires.

## Response `201`

Certificate created successfully

- CertificateDTO — Data Transfer Object for a certificate. Represents a certificate with its metadata, public key, and expiry information.
  - `id` string, required — The unique identifier of the entity.
  - `createdBy` UserInfo, required — Represents the user who performed an action, with a computed display name.
    - `id` string, required — The unique identifier of the user.
    - `friendlyName` string, required — A human-readable display name for the user. "OIAnalytics" for the oianalytics system user, "Admin" for the admin login, or "Firstname Lastname (login)" for regular users.
  - `updatedBy` UserInfo, required — Represents the user who performed an action, with a computed display name.
    - `id` string, required — The unique identifier of the user.
    - `friendlyName` string, required — A human-readable display name for the user. "OIAnalytics" for the oianalytics system user, "Admin" for the admin login, or "Firstname Lastname (login)" for regular users.
  - `createdAt` string, required — Represents an instant in time as an ISO 8601 string.
  - `updatedAt` string, required — Represents an instant in time as an ISO 8601 string.
  - `name` string, required — The name of the certificate.
  - `description` string, required — A description of the certificate's purpose or usage.
  - `publicKey` string, required — The public key of the certificate in PEM format.
  - `certificate` string, required — The certificate in PEM format.
  - `expiry` string, required — Represents an instant in time as an ISO 8601 string.

---

[API](https://skmtc.net/optimistiksas/apis/oibus-api.md) · [All operations](https://skmtc.net/optimistiksas/apis/oibus-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/optimistiksas/oibus-api/revisions/fe8fd32c9fdc/schema)