跳到主要内容

证书重签接口

重签发证书,可以更换 CSR、域名以及域名验证方式。

请求

Content-Type: application/json
Content-Length: 1121

{
"unique_id": "azgZqJGX", // 唯一标识符,必填,不能重复,防止代理商一个订单重复提交的参数,用户点击时候传递订单ID过来,避免重复扣费
"service_id": "o91bZ", // 证书编号,必填,下单时候返回的 `service_id`
"domain_dcv": { // 域名+验证信息,与`csr`必传1个,一条域名对应一种验证类型
"*.example.com": "dns", //⚠️注意:通配符只支持dns或email验证
"example2.com": "http", //⚠️注意:http、https为子域名文件验证必须上传到子域名本身服务下,不支持传主域名或其他域名
"example3.com": "https",
"sub.example4.com": "admin@example4.com" // ⚠️注意:邮箱验证不支持whois邮箱,只支持admin@、administrator@、postmaster@、webmaster@、hostmaster@ + <子域名 或 主域名> 组合的邮箱
},
"csr": "---------BEGIN RSA CERTIFICATE REQUEST---------...", // CSR,与`domain_dcv`必传1个 ⚠️注意:是CSR而非私钥或公钥!若算法RSA必须2048、4096 bits,若算法ECDSA必须P-256、P-384
"contact_email": "subscriber@company.email", // 联系邮箱,用于接收证书验证通知
"renew": 0, // 是否为续费订单,部分CA支持赠送30天功能
"organization": "XX数字证书有限公司", // 公司名称,如果为`OV`、`EV`、`IV`类型的证书,则必须填写。OV证书如果已经签发过,则不允许更改公司信息(下同)
"organization_unit": "IT", // 公司部门,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"registered_address_line1": "上海市具体某条街道", // 公司注册地址,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"serial_no": "31041485234546", // 公司注册号,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"country": "CN", // 公司注册国家,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"state": "上海市", // 公司注册省份,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"city": "上海市", // 公司注册城市,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"postal_code": "200100", // 公司注册邮编,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"organization_phone": "021-10000001", // 公司电话,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"date_of_incorporation": "2019-01-01", // 公司成立日期,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"contact_name": "张君宝", // 联系人姓名,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"contact_title": "法人", // 联系人职位,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"contact_phone": "13800138000", // 联系人电话,如果为`OV`、`EV`、`IV`类型的证书,则必须填写
"notify_url": "https://system.com/order/6163/callback" // 订单回调地址,用于接收订单状态变更通知,该地址必须能够访问到,具体通知参数请见`通知回调`
}

响应

HTTP/1.1 200 OK

Content-Type: application/json
Content-Length: 1120

{
"success": true,
"message": "OK",
"data": {
"cost": 4208.01, // 本次重签名扣取的费用(如果修改域名,可能会带来新的费用)
"service_id": "o91bZ",
"caid": "358174513",
"status": "pending",
"cert_pem": null,
"ca_pem": null,
"not_before": null,
"not_after": null,
"dcv": {
"*.example.com": {
"type": "dns",
"subdomain": "*",
"topleveldomain": "example.com",
"status": "valid",
"dns": {
"type": "cname",
"hostname": "_310dcbbf4cce62f762a2aaa148d556bd",
"fullname": "_310dcbbf4cce62f762a2aaa148d556bd.example.com",
"value": "698d51a19d8a121ce581499d7b701668.bcbe3365e6ac95ea2c0343a2395834dd.20221122.comodoca.com"
}
},
"example2.com": {
"type": "http",
"subdomain": "",
"topleveldomain": "example2.com",
"status": "pending",
"http": {
"filename": "310dcbbf4cce62f762a2aaa148d556bd.txt",
"filecontent": "698d51a19d8a121ce581499d7b70166820221122\n20221122\ncomodoca.com",
"filepath": ".well-known/pki-validation/",
"filefullpath": ".well-known/pki-validation/310dcbbf4cce62f762a2aaa148d556bd.txt",
"url": "http://example2.com/.well-known/pki-validation/310dcbbf4cce62f762a2aaa148d556bd.txt"
}
},
"example3.com": {
"type": "http",
"subdomain": "",
"topleveldomain": "example3.com",
"status": "pending",
"http": {
"filename": "310dcbbf4cce62f762a2aaa148d556bd.txt",
"filecontent": "698d51a19d8a121ce581499d7b70166820221122\n20221122\ncomodoca.com",
"filepath": ".well-known/pki-validation/",
"filefullpath": ".well-known/pki-validation/310dcbbf4cce62f762a2aaa148d556bd.txt",
"url": "https://example3.com/.well-known/pki-validation/310dcbbf4cce62f762a2aaa148d556bd.txt"
}
},
"sub.example4.com": {
"type": "email",
"subdomain": "email",
"topleveldomain": "example4.com",
"status": "pending",
"email": {
"address": "admin@example4.com",
"available": [
"admin@example4.com",
"administrator@example4.com",
"webmaster@example4.com",
"postmaster@example4.com",
"hostmaster@example4.com",
"admin@email.example4.com",
"administrator@sub.example4.com",
"webmaster@sub.example4.com",
"postmaster@sub.example4.com",
"hostmaster@sub.example4.com"
]
}
},
"*.example5.com": {
"type": "dns",
"subdomain": "*",
"topleveldomain": "example.com",
"status": "valid",
"dns": {
"type": "cname",
"hostname": "_310dcbbf4cce62f762a2aaa148d556bd",
"fullname": "_310dcbbf4cce62f762a2aaa148d556bd.example.com",
"value": "698d51a19d8a121ce581499d7b701668.bcbe3365e6ac95ea2c0343a2395834dd.20221122.comodoca.com"
}
}
}
}
}
危险

如果重签名后的域名存在被替换,调用此接口会导致证书被吊销!