The following endpoint returns the supported action for a certificate.

https://<HOST>:<CAGW_HOST_PORT>/<server.servlet.context-path>/v1/certificate-authorities/{caId}/certificates/{sn}/actions

Where:

  • {caId} is the Entrust Certificate Authority identifier
  • {sn} is the serial number of the certificate

See below for considerations on renewing Sectigo certificates with these actions.

Renewing Sectigo-issued certificates with the certificate action

When using the certificate action to renew a certificate issued by a Sectigo CA, the  JSON request must include the csr setting inside the properties field. For example:

{
"action": {
"comment": "Test",
"properties": {
"csr": "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"
},
"type": "RenewAction"
}
}

Renewing Sectigo-issued certificates with the renewal action

When using the renew action to renew a certificate issued by a Sectigo CA, the  JSON request must include the RenewalSerialNumber setting inside the properties field. For example:

{
"csr": "MIIC2zCCAcMCAQAwJjEkMCIGA1UEAwwbbWF3aWEudGVzdC5zZWN0aWdvLnJlbmV3LjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xeRXTqPSvmTVCtLi17pvGH2d5zQP2uiU5CR1r7ofGjJVumktr9MUf4DWmAgaaumkmjn0xRMSew4viE99nONP7XfciJLBRKgjBBnwr0fLCCiGRVKLr3PiTQ/N9J60gt8KkVYZ94Z1HmiGtXye6cZHX2ibnqfcW//tN5ewUrzQTfLyIAiw0OqRPkt10M4xFrRtFv2d07bf6rlPS75VCjYdfUaerHf8aOmllFWzmciYaZkGM2/Uds+rel+OeVT8gzBqAqvgxCRXf2On67acXV1x2gStaa+uJmk46EacLtL+b/DHXigoNSqruchMUdHQfqnd8DtVVCjPy2nTBrHmBvl8wIDAQABoHAwbgYJKoZIhvcNAQkOMWEwXzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwJgYDVR0RBB8wHYIbbWF3aWEudGVzdC5zZWN0aWdvLnJlbmV3LjA2MA0GCSqGSIb3DQEBCwUAA4IBAQCdKzAHBavqRIDzVu1VSj0bI/VjgOcF982p6/lPnFKfl+13fxslUN003kG/uuh4Zdxo/OOVMH6VSi+T4I06GuO/7LoMg7oAxqN1FaBjK5VwlNAuro2uS54FGz+2ubYS8F+cTQXffMOuerNgVJXGFKaaHtrcoDynfp9PgyJg+I4zBaPR/5E051Am2t5K+wQHtsO+ThoInnK5iwslE+SUnzCZwGwkf50Uf450/pyjKnUKsjXpdfPSoTrkVEFTniNkM+FzFwjjhECp536EzWlLsX/C3d/QGTndH4c4GN9qFGaybDmWZHHJHabj52/CeORJmkrI0REQi1ROFSGW8Zb66Dz9",
"renewal": true,
"properties": {
"RenewalSerialNumber": "4c56db9f8f07af1e93c66a37e041ef8e"
},
"profileId": "profileA-local",
"requiredFormat": {
"format": "PEM"
}
}