Sectigo icon

Sectigo

Manage certificate enrollment and lifecycle via Sectigo REST Enrollment API

Actions7

Certificate → Renew

AI-generated

Summary

Renew an existing Sectigo certificate by specifying its SCM certificate ID, type, and profile ID, optionally providing a new CSR, Subject Alternative Names, comments, domain control validation method, and other details to submit a renewal request via the Sectigo API.

Inputs

  • SCM Certificate ID (required) — The numeric certificate ID from the Sectigo SCM portal identifying the certificate to renew.
  • Certificate Type (required) — The type of the certificate to renew; must match the type shown in the SCM portal. Options: SSL, S/MIME (Client), Device, Code Signing.
  • Profile ID (required) — The certificate profile ID to use for the renewal.
  • CSR — Optional new Base64-encoded PKCS#10 Certificate Signing Request for the renewal.
  • Subject Alternative Names — Optional comma-separated list of Subject Alternative Names to include with the renewal.
  • Comments — Optional comments to include with the renewal request.
  • DCV Mode — Optional Domain Control Validation method for the renewal; options include (None), EMAIL, CNAME, HTTP, HTTPS.
  • DCV Email — If DCV Mode is EMAIL, specify the email address for Domain Control Validation.
  • External Requester — Optional comma-separated email addresses of external requesters involved in the renewal.
  • Custom Fields — Optional key/value custom fields to include with the renewal request.

Output shape

a single JSON object containing details of the new certificate renewal response including new certificate ID and previous certificate info

The output includes the new certId and sslId representing the renewed certificate, along with previousSslId and previousCertId. The API response fields are merged into the output. Errors are thrown on API failures.

Links

Discussion