Skip to content
regfish Docs

Reissue TLS certificate

POST /tls/certificate/{certificate_id}/reissue

Operation ID: ReissueCertificate

Reissue an already issued or certificate-revoked TLS certificate with a new CSR while keeping the same order. Optionally, validity_days can request a shorter replacement certificate lifetime, but the CA only supports that for eligible multi-year plan orders and never beyond the remaining order contract.

Path parameters

Section titled “Path parameters”
Name Type Required Description
certificate_id tlsCertificateId yes —

Request body

Section titled “Request body”

tlsCertificateReissueRequest

Field Type Required Description
csr csr yes PEM encoded certificate signing request (CSR).
common_name fqdn_relaxed no Fully Qualified Domain Name.
dns_names fqdn_relaxed[] no Optional. If provided, the SAN list must match the current order exactly.
dcv_method tlsCertificateDcvMethod yes (dns-cname-token, email)
comments string no Optional provider comment stored with the reissue request.
validity_days integer no Optional requested certificate lifetime in days for the replacement certificate. The CA only honors this for eligible multi-year plan orders and never beyond the remaining order contract.

Responses

Section titled “Responses”
Status Type Description
200 tlsCertificateResponse TLS certificate reissue accepted
400 Error Invalid request payload or CSR
401 Error Unauthorized
404 Error TLS certificate not found
409 Error The TLS certificate cannot be reissued in its current state
500 Error Unexpected error
502 Error Upstream TLS provider error

Response body

Section titled “Response body”
Field Type Required Description
success boolean yes Success indicator
code integer no Response/Error Code
response tlsCertificateResponse no —

Example

Section titled “Example”
Terminal-Fenster
curl -X POST "https://api.regfish.com/tls/certificate/<certificate_id>/reissue" \
  -H "x-api-key: $REGFISH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIIC...\n-----END CERTIFICATE REQUEST-----",
    "common_name": "www.example.com",
    "dns_names": [
      "www.example.com"
    ],
    "dcv_method": "dns-cname-token",
    "comments": "string",
    "validity_days": 0
  }'

Build a request

Section titled “Build a request”

Fill in values — the call below updates as you type. Nothing is sent: the API does not currently allow browser requests from this domain (CORS). The API key is not stored.