Sign intermediate certificate

Create intermediate CA certificate from parent CA

POST /api/v1/cert-manager/ca/internal/{caId}/sign-intermediate

cURL

cURL

curl --request POST \
  --url https://us.infisical.com/api/v1/cert-manager/ca/internal/{caId}/sign-intermediate \
  --header 'Content-Type: application/json' \
  --data '
{
  "csr": "<string>",
  "notAfter": "<string>",
  "notBefore": "<string>",
  "maxPathLength": -1
}
'

200

{
  "certificate": "<string>",
  "certificateChain": "<string>",
  "issuingCaCertificate": "<string>",
  "serialNumber": "<string>"
}

Path Parameters

caId · string · required

The ID of the CA to sign the intermediate certificate with.

Body

application/json

csr · string · required

The pem-encoded CSR to sign with the CA.

Minimum string length: 1

notAfter · string · required

The date and time when the intermediate CA expires in YYYY-MM-DDTHH:mm:ss.sssZ format.

notBefore · string

The date and time when the intermediate CA becomes valid in YYYY-MM-DDTHH:mm:ss.sssZ format.

maxPathLength · number · default: -1

The maximum number of intermediate CAs that may follow this CA in the certificate / CA chain. A maxPathLength of -1 implies no path limit on the chain.

Required range: x >= -1

Response

200

application/json

Default Response

certificate · string · required

The signed intermediate certificate.

certificateChain · string · required

The certificate chain of the intermediate certificate.

issuingCaCertificate · string · required

The certificate of the issuing CA.

serialNumber · string · required

The serial number of the intermediate certificate.