Reissue TLS certificate

POST /tls/certificate/{certificate_id}/reissue

Operation ID: ReissueCertificate

Reissue an already issued or certificate-revoked TLS certificate with a new CSR while keeping the same order. Optionally, validity_days can request a shorter replacement certificate lifetime, but the CA only supports that for eligible multi-year plan orders and never beyond the remaining order contract.

Path parameters

Name	Type	Required	Description
`certificate_id`	tlsCertificateId	yes	-

Request body

tlsCertificateReissueRequest

Field	Type	Required	Description
`csr`	csr	yes	PEM encoded certificate signing request (CSR).
`common_name`	fqdn_relaxed	no	Fully Qualified Domain Name.
`dns_names`	fqdn_relaxed[]	no	Optional. If provided, the SAN list must match the current order exactly.
`dcv_method`	tlsCertificateDcvMethod	yes	(`dns-cname-token`, `email`)
`comments`	`string`	no	Optional provider comment stored with the reissue request.
`validity_days`	`integer`	no	Optional requested certificate lifetime in days for the replacement certificate. The CA only honors this for eligible multi-year plan orders and never beyond the remaining order contract.

Responses

Status	Type	Description
`200`	`tlsCertificateResponse`	TLS certificate reissue accepted
`400`	`Error`	Invalid request payload or CSR
`401`	`Error`	Unauthorized
`404`	`Error`	TLS certificate not found
`409`	`Error`	The TLS certificate cannot be reissued in its current state
`500`	`Error`	Unexpected error
`502`	`Error`	Upstream TLS provider error

Response body

Field	Type	Required	Description
`success`	`boolean`	yes	Success indicator
`code`	`integer`	no	Response/Error Code
`response`	tlsCertificateResponse	no	-

Example

curl -X POST "https://api.regfish.com/tls/certificate/<certificate_id>/reissue" \
  -H "x-api-key: $REGFISH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIIC...\n-----END CERTIFICATE REQUEST-----",
    "common_name": "www.example.com",
    "dns_names": [
      "www.example.com"
    ],
    "dcv_method": "dns-cname-token",
    "comments": "string",
    "validity_days": 0
  }'

Build a request

Fill in values - the call below updates as you type. Nothing is sent: the API does not currently allow browser requests from this domain (CORS). The API key is not stored.