> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Import cross-signed certificate

> Import or replace the cross-signed certificate of an internal CA. Certificates the CA and its internal sub-CAs issue afterwards carry it in their chain. An intermediate CA signed through sign-intermediate gets the CA's own chain without it. Certificates already issued keep their chain.



## OpenAPI

````yaml PUT /api/v1/cert-manager/ca/internal/{caId}/cross-signed-certificate
openapi: 3.0.3
info:
  title: Infisical API
  description: List of all available APIs that can be consumed
  version: 0.0.1
servers:
  - url: https://us.infisical.com
    description: Production server (US)
  - url: https://eu.infisical.com
    description: Production server (EU)
  - url: http://localhost:8080
    description: Local server
security: []
paths:
  /api/v1/cert-manager/ca/internal/{caId}/cross-signed-certificate:
    put:
      tags:
        - PKI Certificate Authorities
      description: >-
        Import or replace the cross-signed certificate of an internal CA.
        Certificates the CA and its internal sub-CAs issue afterwards carry it
        in their chain. An intermediate CA signed through sign-intermediate gets
        the CA's own chain without it. Certificates already issued keep their
        chain.
      operationId: importCaCrossSignedCertificate
      parameters:
        - schema:
            type: string
            format: uuid
          in: path
          name: caId
          required: true
          description: The ID of the CA to import the cross-signed certificate for.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                certificate:
                  type: string
                  minLength: 1
                  maxLength: 100000
                  description: >-
                    The PEM-encoded cross-signed certificate: the CA's
                    certificate signed by the old CA as a CA certificate. It
                    must have the same subject, public key, and subject key
                    identifier as the CA.
                certificateChain:
                  type: string
                  maxLength: 500000
                  description: >-
                    The PEM-encoded certificates of the old CA, in order: start
                    with the CA that signed the cross-signed certificate and end
                    with its root. When the old root signed it directly, this is
                    the old root's certificate.
              required:
                - certificate
                - certificateChain
              additionalProperties: false
      responses:
        '200':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  crossSignedCertificate:
                    type: object
                    properties:
                      caId:
                        type: string
                        format: uuid
                        description: >-
                          The ID of the CA the cross-signed certificate belongs
                          to.
                      certificate:
                        type: string
                        description: The PEM-encoded cross-signed certificate.
                      certificateChain:
                        type: string
                        description: >-
                          The PEM-encoded certificates of the old CA, from the
                          one that signed the cross-signed certificate up to its
                          root.
                      issuer:
                        type: string
                        description: >-
                          The distinguished name of the CA that signed the
                          cross-signed certificate.
                      serialNumber:
                        type: string
                        description: The serial number of the cross-signed certificate.
                      notBefore:
                        type: string
                        format: date-time
                        description: >-
                          The date and time the cross-signed certificate becomes
                          valid.
                      notAfter:
                        type: string
                        format: date-time
                        description: >-
                          The date and time the cross-signed certificate
                          expires. After this, new certificates no longer
                          include it in their chain.
                    required:
                      - caId
                      - certificate
                      - certificateChain
                      - issuer
                      - serialNumber
                      - notBefore
                      - notAfter
                    additionalProperties: false
                required:
                  - crossSignedCertificate
                additionalProperties: false
        '400':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 400
                  message:
                    type: string
                  error:
                    type: string
                  details: {}
                required:
                  - reqId
                  - statusCode
                  - message
                  - error
                additionalProperties: false
        '401':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 401
                  message:
                    type: string
                  error:
                    type: string
                required:
                  - reqId
                  - statusCode
                  - message
                  - error
                additionalProperties: false
        '403':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 403
                  message:
                    type: string
                  details: {}
                  error:
                    type: string
                required:
                  - reqId
                  - statusCode
                  - message
                  - error
                additionalProperties: false
        '404':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 404
                  message:
                    type: string
                  error:
                    type: string
                required:
                  - reqId
                  - statusCode
                  - message
                  - error
                additionalProperties: false
        '422':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 422
                  message: {}
                  error:
                    type: string
                required:
                  - reqId
                  - statusCode
                  - error
                additionalProperties: false
        '500':
          description: Default Response
          content:
            application/json:
              schema:
                type: object
                properties:
                  reqId:
                    type: string
                  statusCode:
                    type: number
                    enum:
                      - 500
                  message:
                    type: string
                  error:
                    type: string
                required:
                  - reqId
                  - statusCode
                  - message
                  - error
                additionalProperties: false

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.