DigiCert (CertCentral Services API)

Create a DigiCert Certificate Authority

Infisical UI
API

Create a DigiCert App Connection

Follow the DigiCert App Connection guide to store your CertCentral API key in Infisical.

Create the External CA

In your Certificate Manager project, navigate to Certificate Authorities, click Create CA in the External Certificate Authorities section, choose DigiCert CertCentral as the type, and fill out the form:

App Connection — the DigiCert connection you created
Organization — the CertCentral organization that should appear on issued certificates
Product — the CertCentral entitlement this CA will issue under

To create a DigiCert Certificate Authority, make an API request to the Create DigiCert CA API endpoint.

Create a DigiCert CA

curl --request POST \
  --url https://app.infisical.com/api/v1/pki/ca/digicert \
  --header 'Content-Type: application/json' \
  --data '{
    "projectId": "<project-id>",
    "name": "digicert-ov",
    "status": "active",
    "configuration": {
      "appConnectionId": "<digicert-app-connection-id>",
      "organizationId": 112236,
      "productNameId": "ssl_plus"
    }
  }'

Issue a certificate

After creating the CA and a Certificate Profile, request a certificate as you normally would. The request will move through the following states:

Pending Validation: DigiCert has accepted the order. Complete the domain control validation directly in DigiCert CertCentral.

Your team completes validation on the CertCentral side.

Infisical re-checks DigiCert. If you don’t want to wait, click Trigger Validation on the request row to force an immediate check. When DigiCert confirms the order, Infisical downloads the certificate and chain and moves the request to Issued.

If DigiCert does not issue within 24 hours the request transitions to Failed. Complete validation on CertCentral and submit a new request.

FAQ

What happens when I revoke a DigiCert-issued certificate in Infisical?

Revoking the certificate in Infisical immediately marks it Revoked in the local inventory and submits a revocation request to DigiCert CertCentral against the underlying order. Depending on your CertCentral account’s revocation policy, DigiCert may queue that request for administrator approval before the certificate is actually revoked on their side.

Certificate Management

Product Reference

Infrastructure Integrations

Certificate Syncs

External CA Integrations

DigiCert (CertCentral Services API)

Concept

Prerequisites

Create a DigiCert Certificate Authority

Issue a certificate

FAQ

Certificate Management

Product Reference

Infrastructure Integrations

Certificate Syncs

External CA Integrations

​Concept

​Prerequisites

​Create a DigiCert Certificate Authority

​Issue a certificate

​FAQ

Concept

Prerequisites

Create a DigiCert Certificate Authority

Issue a certificate

FAQ