Certificates

Sign certificates and check certificate status.

📄️Sign a custom certificate signing request

Signs a PEM-encoded PKCS#10 certificate signing request and returns the signed certificate. Requires the admin role. Requires custom CSR signing to be enabled. A caller without the admin role, or a deployment where custom CSR signing is not enabled, receives 500 with the Combine HTML error page.

📄️Get certificate authority expiration dates

Returns the expiration dates of the signer and root certificate authority certificates. Available to any authenticated user.

📄️Process an OCSP request

Checks the revocation status of the certificates in a DER-encoded OCSP request and returns a signed OCSP response. Requires the OCSP responder to be enabled. Does not require a client certificate or the X-Requested-By header. A request larger than the combine.tap.ocsp.responder.request.byteLimit Configuration Value (default 8,192 bytes) receives an OCSP malformedRequest response, even when the responder is not enabled. A certificate not issued by the deployment's signer certificate authority is reported as unknown.

📄️Process an OCSP request (GET)

The RFC 6960 GET form of the OCSP responder. Checks the revocation status of the certificates in the OCSP request carried in the rest of the path and returns a signed OCSP response. Requires the OCSP responder to be enabled. Does not require a client certificate. A request that cannot be decoded receives an OCSP malformedRequest response, even when the responder is not enabled.