Sectigo icon

Sectigo

Manage certificate enrollment and lifecycle via Sectigo REST Enrollment API

Actions7

Certificate → Enroll

AI-generated

Summary

Submit a new certificate enrollment request for various certificate types including SSL, S/MIME Client, Device, and Code Signing by providing a Base64-encoded PKCS#10 CSR and type-specific parameters.

Inputs

  • Certificate Type (required) — Choose the type of certificate to enroll: SSL, S/MIME Client, Device, or Code Signing.
  • CSR (required) — Provide the Base64-encoded PKCS#10 Certificate Signing Request (CSR).
  • Subject Alternative Names — For SSL certificates: a comma-separated list of Subject Alternative Names (SANs).
  • Comments — Optional comments specific to the enrollment request, varying by certificate type.
  • External Requester — For SSL certificates: comma-separated email addresses of external requesters (max 512 characters).
  • Custom Fields — Custom key-value fields to include in the enrollment request, varying by certificate type.
  • Email (required) — For S/MIME Client and Code Signing certificates: contact email address.
  • First Name — First name of the certificate subject, applicable for S/MIME Client and Code Signing certificates.
  • Last Name — Last name of the certificate subject, applicable for S/MIME Client and Code Signing certificates.
  • Middle Name — Middle name of the certificate subject for S/MIME Client certificates.
  • Phone — Phone number for the certificate subject (S/MIME Client certificates).
  • Common Name — Common name for S/MIME Client certificates.
  • HSM Type — For Code Signing certificates: select the Hardware Security Module (HSM) type.
  • Optional Fields — For Device certificates: optional name/value pairs to include with the enrollment request.

Output shape

a single item containing JSON with the enrollment response including a certId and sslId along with returned data from Sectigo

The returned JSON contains the unique certificate identifier (certId), an extracted numeric sslId, and other response data from the Sectigo API. The operation supports enrollment for multiple certificate types with type-specific parameters.

Examples

Example 1: Enroll SSL certificate

Set Certificate Type to SSL, provide a CSR, optionally add Subject Alternative Names, Comments, External Requester emails, and Custom Fields.

Example 2: Enroll S/MIME Client certificate

Set Certificate Type to S/MIME Client, provide a CSR, required Email, and optional fields such as First Name, Last Name, Middle Name, Phone, Common Name, Comments, and Custom Fields.

Example 3: Enroll Device certificate

Set Certificate Type to Device, provide a CSR, optionally add Comments, Custom Fields, and Optional Fields as name/value pairs.

Links

Discussion