DigiCert (CertCentral Services API)

Create a DigiCert Certificate Authority

Infisical UI
API

Create a DigiCert App Connection

Follow the DigiCert App Connection guide to store your CertCentral API key in Infisical.

Create the External CA

In Certificate Manager, go to Settings → Certificate Authorities, click Create CA in the External Certificate Authorities section, choose DigiCert CertCentral as the type, and fill out the form:

App Connection — the DigiCert connection you created
Organization — the CertCentral organization that should appear on issued certificates
Product — the CertCentral entitlement this CA will issue under

To create a DigiCert Certificate Authority, make an API request to the Create DigiCert CA API endpoint.

Create a DigiCert CA

curl --request POST \
  --url https://app.infisical.com/api/v1/pki/ca/digicert \
  --header 'Content-Type: application/json' \
  --data '{
    "name": "digicert-ov",
    "status": "active",
    "configuration": {
      "appConnectionId": "<digicert-app-connection-id>",
      "organizationId": 112236,
      "productNameId": "ssl_plus"
    }
  }'

DigiCert Validation Workflow

When you request a certificate through a DigiCert CertCentral CA, the request moves through these states:

State	Description
Pending Validation	DigiCert has accepted the order. Complete domain control validation in DigiCert CertCentral.
Issued	Infisical polls DigiCert and downloads the certificate once validation completes. Click Trigger Validation to force an immediate check.
Failed	If DigiCert does not issue within 24 hours. Complete validation on CertCentral and submit a new request.

OV and EV certificates require manual domain validation on the DigiCert CertCentral side before issuance.

FAQ

What happens when I revoke a DigiCert-issued certificate in Infisical?

Revoking the certificate in Infisical immediately marks it Revoked in the local inventory and submits a revocation request to DigiCert CertCentral against the underlying order. Depending on your CertCentral account’s revocation policy, DigiCert may queue that request for administrator approval before the certificate is actually revoked on their side.

What’s Next

Now that your DigiCert CA is configured, set up the infrastructure to issue certificates:

Certificate Profiles

Create a profile that references your DigiCert CA.

Applications

Create an Application, attach a profile, and configure enrollment.

Enrollment Methods

Choose how certificates are requested — API, ACME, EST, or SCEP.

Quick Start

Issue your first certificate end-to-end.

DigiCert (CertCentral Services API)

Concept

Prerequisites

Create a DigiCert Certificate Authority

DigiCert Validation Workflow

FAQ

What’s Next

Certificate Profiles

Applications

Enrollment Methods

Quick Start

​Concept

​Prerequisites

​Create a DigiCert Certificate Authority

​DigiCert Validation Workflow

​FAQ

​What’s Next

Certificate Profiles

Applications

Enrollment Methods

Quick Start

Concept

Prerequisites

Create a DigiCert Certificate Authority

DigiCert Validation Workflow

FAQ

What’s Next