5.2 Create Certificate

Perform the following command to create a new certificate:

POST /oclm-config/v1/certs

Creates a new certificate through CMP initial registration. The operation is asynchronous and returns HTTP 202 Accepted after the request is scheduled.

Sample request payload:

{
  "name": "server",
  "renewBefore": "15d",
  "privateKey": {
    "keyAlgo": "RSA",
    "keySize": "KEYSIZE_2048",
    "keyEncoding": "PEM"
  },
  "csr": {
    "subject": {
      "country": "US",
      "state": "CA",
      "location": "Redwood Shores",
      "organization": "Oracle",
      "organizationUnit": "OCLM",
      "commonName": "server.example.com"
    },
    "subjectAltName": {
      "critical": false,
      "dns": ["server.example.com"],
      "ipAddress": ["10.0.0.10"]
    },
    "keyUsage": {
      "critical": false,
      "keyUsageValues": ["DIGITAL_SIGNATURE"]
    },
    "extendedKeyUsage": {
      "critical": false,
      "extendedKeyUsageValues": ["CLIENT_AUTH", "SERVER_AUTH"]
    },
    "basicConstraints": {
      "critical": false,
      "basicConstraintsValue": "END_ENTITY"
    },
    "days": "390"
  }
}

Successful response:

202 Accepted

{
  "name": "server.example.com",
  "status": "ACCEPTED"
}

When uuid is present in the response, use it with the retrieve API. If not, use the name.