Skip to main content
POST
/
api
/
v1
/
cert-manager
/
ca
/
internal
/
{caId}
/
renew
cURL
curl --request POST \
  --url https://us.infisical.com/api/v1/cert-manager/ca/internal/{caId}/renew \
  --header 'Content-Type: application/json' \
  --data '
{
  "type": "existing",
  "notAfter": "<string>"
}
'
{
  "certificate": "<string>",
  "certificateChain": "<string>",
  "serialNumber": "<string>"
}

Path Parameters

​
caId
string
required

The ID of the CA to renew the CA certificate for.

Body

application/json
​
type
enum<string>
required

The type of behavior to use for the renewal operation. Currently Infisical is only able to renew a CA certificate with the same key pair.

Available options:
existing
​
notAfter
string
required

The expiry date and time for the renewed CA certificate in YYYY-MM-DDTHH:mm:ss.sssZ format.

Response

Default Response

​
certificate
string
required

The renewed CA certificate body.

​
certificateChain
string
required

The certificate chain of the CA.

​
serialNumber
string
required

The serial number of the renewed CA certificate.