Generate CSR

POST

/certificates/csr

Generates a certificate signing request and a matching private key, for when you do not want to create the pair yourself. Send the csr to POST /certificates/{id}/request.

The private_key is returned once and is not stored in your API log, so keep it: it is needed to install the issued certificate. Bringing your own CSR is fine too, in which case this call is not needed.

Request

Authorization

API Key

Add parameter in header

API-key

Example:

API-key: ********************

Header Params

Body Params application/jsonRequired

Example

{
    "common_name": "example.com",
    "organization": "Example BV",
    "email": "beheer@example.com",
    "country": "NL",
    "state": "Gelderland",
    "locality": "Arnhem",
    "unit": "IT",
    "bits": 2048
}

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location 'https://mijn.host/api/v2/certificates/csr' \
--header 'Accept: application/json' \
--header 'User-Agent: my-application/1.0.0' \
--header 'API-key: <api-key>' \
--header 'Content-Type: application/json' \
--data-raw '{
    "common_name": "example.com",
    "organization": "Example BV",
    "email": "beheer@example.com",
    "country": "NL",
    "state": "Gelderland",
    "locality": "Arnhem",
    "unit": "IT",
    "bits": 2048
}'

Responses

🟢200Success

application/json

Bodyapplication/json

Example

{
    "status": 0,
    "status_description": "string",
    "data": {
        "csr": "string",
        "private_key": "string"
    }
}

🟠400Missing or invalid subject field

🟠400Wrong request method

🟠400SSL connection is required

🟠401No valid API key set

🟠401API key has expired

🟠401Remote IP address is not found in the API key whitelist

🔴500Error

Modified at 2026-08-20 12:45:15

Order certificate

Request certificate