Sectigo icon

Sectigo

Manage certificate enrollment and lifecycle via Sectigo REST Enrollment API

Actions7

Certificate → Replace

AI-generated

Summary

Replace an existing certificate in the Sectigo Certificate Manager using a new Base64-encoded PKCS#10 CSR, optionally updating Subject Alternative Names and comments.

Inputs

  • SCM Certificate ID (required) — The numeric certificate ID as shown in the Sectigo SCM portal identifying the certificate to be replaced.
  • Certificate Type (required) — The type of the certificate, must match the type shown in the SCM portal. Options: SSL, S/MIME (Client), Device, Code Signing.
  • CSR (required) — The new Base64-encoded PKCS#10 Certificate Signing Request to replace the existing certificate.
  • Subject Alternative Names — Optional comma-separated list of Subject Alternative Names for the replacement certificate.
  • Comments — Optional comments to include with the certificate replacement request.

Output shape

a single JSON object encapsulated in an array containing the new certificate ID, new SCM certificate ID, the previous certificate ID and SCM certificate ID, and any additional response data from the Sectigo API.

The output includes new identifiers for the replaced certificate and references to the previous certificate. Errors during the process will throw exceptions unless 'Continue On Fail' is enabled, in which case error messages are returned in the output JSON.

Examples

Example 1: Replace a certificate with a new CSR

Provide the SCM Certificate ID and matching Certificate Type of the certificate to replace; supply the new CSR. Optionally include SANs and comments for the request.

Links

Discussion