Developers
Certificates

Issue a certificate

POST/users/{user_id}/certificates

Issues a certificate to the user for the specified product.

If the user already holds a valid certificate for the product, the existing certificate is returned instead of a new one being issued.

To reissue a certificate, set supersedes_certificate_id to the certificate being replaced. Reissuing requires the certificates.reissue permission in addition to certificates.create, and the replaced certificate is revoked with the reason reissued.

Authorization

AuthorizationBearer <token>

Autonomous mode: the API credential secret, sent as a bearer token. Credential secrets are identified by a fixed prefix.

In: header

Path Parameters

user_id*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/users/string/certificates" \  -H "Content-Type: application/json" \  -d '{    "product_id": "string"  }'
{  "data": {    "code": "string",    "deleted": true,    "fields": {},    "id": "string",    "issued_at": "2019-08-24T14:15:22Z",    "number": {      "instance": 0,      "product": 0    },    "object": "certificate",    "pdf_url": "string",    "product_id": "string",    "reissue": true,    "revision": "string",    "revoked": {      "at": "2019-08-24T14:15:22Z",      "by": {        "id": "string",        "kind": "admin"      },      "reason": "string"    },    "status": "valid",    "superseded_by_certificate_id": "string",    "supersedes_certificate_id": "string",    "user_id": "string",    "validation_url": "string"  }}

List a user's certificates GET

Returns the certificates issued to the user, including revoked certificates. Deleted certificates are not included. The collection can be filtered by product, status, and issue date, and is paginated with a cursor. The `fields` object, which contains the document, address, and custom field values recorded at issuance, is included only when the credential has the `users.read_personal` permission.

Retrieve a certificate GET

Revoked certificates remain retrievable, with `status` set to `revoked`. Template previews are not certificates and cannot be retrieved through this operation. The response includes an `ETag` representing the current revision. Send this value in the `If-Match` header when revoking the certificate to avoid acting on an outdated version.