© 2002-2026 regfish GmbH. Regfish ist eine eingetragene Wortmarke der regfish GmbH. Alle Preise inkl. 19% MwSt. Alle Angaben ohne Gewähr. Es gelten unsere Allgemeine Geschäftsbedingungen.
API-Referenz
Alle Operationen werden aus der Spezifikation übernommen und mit Request-/Response-Beispielen ergänzt.
Zertifikate
GET/tls/certificate
List TLS certificates
List TLS certificates in the current account.
POST/tls/certificate
Order or renew TLS certificate
Create a new TLS certificate order or renew an existing certificate. When `renewal_of_certificate_id` is set, `validity_days` still describes the purchased base term. If the provider accepts the renewal, any remaining validity from the previous certificate may be added after issuance. OV and EV-style products can return `action_required=true` together with a `completion_url` when additional organization or validation details are needed before submission.
GET/tls/certificate/:certificate_id
Get TLS certificate
Retrieve a single TLS certificate including staged/action-required state, validation details, and provider metadata.
POST/tls/certificate/:certificate_id/complete
Complete staged TLS certificate order
Complete an action-required TLS certificate order by binding it to an existing usable DigiCert organization and submitting the provider order.
GET/tls/certificate/:certificate_id/download/:format
Download TLS certificate
Download the issued TLS certificate either as PEM text or as a ZIP bundle.
POST/tls/certificate/:certificate_id/reissue
Reissue TLS certificate
Reissue an already issued or certificate-revoked TLS certificate with a new CSR while keeping the same order. Optionally, `validity_days` can request a shorter replacement certificate lifetime, but the CA only supports that for eligible multi-year plan orders and never beyond the remaining order contract.
POST/tls/certificate/:certificate_id/cancel
Cancel TLS certificate order
Cancel a pending TLS certificate order. Use `/tls/certificate/{certificate_id}/order-cancel` when an already issued order should be revoked in full.
POST/tls/certificate/:certificate_id/order-cancel
Cancel or revoke TLS certificate order
Cancel a not-yet-issued order before issuance, or revoke the complete issued order within the first 7 days after ordering. A full revocation invalidates all certificate versions on that order and prevents further reissue.
POST/tls/certificate/:certificate_id/revoke
Revoke TLS certificate
Revoke only the currently selected TLS certificate while keeping the order available for later reissue.
Organisationen
GET/tls/organization
List TLS organizations
List TLS organizations that can be used for OV and EV certificate orders, including readiness information.
POST/tls/organization
Create TLS organization
Create a DigiCert-backed TLS organization including the local contact record used for OV or EV certificate ordering.
GET/tls/organization/:organization_id
Get TLS organization
Retrieve a single DigiCert-backed TLS organization by its public organization id.
PATCH/tls/organization/:organization_id
Update TLS organization
Update the local TLS organization contact data used for readiness checks and order completion.
Beispiel: TLS-Zertifikat bestellen
POST
curl --request POST \
--url 'https://api.regfish.com/tls/certificate' \
--header 'x-api-key: YOUR_API_KEY' \
--header 'content-type: application/json' \
--data '{
"sku": "RapidSSL",
"common_name": "www.example.com",
"csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIIC...\n-----END CERTIFICATE REQUEST-----",
"dcv_method": "email",
"validity_days": 199
}'Beispiel: Zertifikatsstatus abrufen
GET
curl --request GET \
--url 'https://api.regfish.com/tls/certificate/1' \
--header 'x-api-key: YOUR_API_KEY'Beispiel: Zertifikat als PEM laden
GET
curl --request GET \
--url 'https://api.regfish.com/tls/certificate/1/download/pem' \
--header 'x-api-key: YOUR_API_KEY'Beispiel: Zertifikat widerrufen
POST
curl --request POST \
--url 'https://api.regfish.com/tls/certificate/1/revoke' \
--header 'x-api-key: YOUR_API_KEY' \
--header 'content-type: application/json' \
--data '{
"comment": "key compromise confirmed",
"revocation_reason": "key_compromise"
}'Direkt mit certbro weiter
Neu
certbro für Linux
Wenn du aus der TLS API schneller zu einer betreibbaren Linux-Automatisierung kommen willst, ist certbro der direkte nächste Schritt.
Open-Source-CLI für TLS-Automatisierung, DNS-DCV und automatische Verlängerungen.
Zertifikatsprozesse automatisieren
Vom Auftrag bis zum Widerruf. Die Regfish TLS API deckt typische Zertifikats-Workflows in einem skriptbaren Ablauf ab: Bestellung, Statusprüfung, Download und Widerruf lassen sich direkt in interne Prozesse und Deployments integrieren.
Die Beispiele unten zeigen produktionsnahe Calls für Certificate Lifecycle Management, damit du auch bei kürzeren Laufzeiten reproduzierbare und saubere Abläufe aufbauen kannst.