Workflow Examples

Short description of different commands for certificates and subs.

AddCertificate

Ordering a new certificate. Creates a new certificate and a new sub.

Command

command=AddCertificate
csrX=...
[...]

Certificate before the command has been issued:

Command

n/a

Certificate after the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE

RenewCertificate

Renewing an existing certificate. Mandatory parameter is "certificate", a certain sub can be stated optionally. Creates a new sub for an existing certificate.

Example 1:

No sub has been explicitly stated, the newest active certificate will be renewed.

Command

command=RenewCertificate
certificate=CZ00001

Certificate before the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE	<-- this sub will be renewed

Certificate after the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE
Sub:			CZ00001-002		ACTIVE	<-- this is the renewed sub

Example 2:

No sub has been explicitly stated, the newest active certificate will be renewed.

Command

command=RenewCertificate
certificate=CZ00001

Certificate before the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE
Sub:			CZ00001-002		ACTIVE	<-- this sub will be renewed

Certificate after the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE
Sub:			CZ00001-002		ACTIVE
Sub:			CZ00001-003		ACTIVE	<-- this is the renewed sub

Example 3:

The explicitly stated sub will be renewed.

Command

command=RenewCertificate
certificate=CZ00001
sub=CZ00001-001

Certificate before the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE	<-- this sub will be renewed
Sub:			CZ00001-002		ACTIVE

Certificate after the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE
Sub:			CZ00001-002		ACTIVE
Sub:			CZ00001-003		ACTIVE	<-- this is the renewed sub

ReissueCertificate

Reissuing a certificate.

Example 1:

No sub has been explicitly stated, the newest active certificate will be reissued.

Command

command=ReissueCertificate
certificate=CZ00001
csrX=...

Certificate before the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE	<-- this sub will be reissued

Certificate after the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE
Sub:			CZ00001-002		ACTIVE	<-- this is the reissued sub

Example 2:

No sub has been explicitly stated, the newest active certificate will be reissued.

Command

command=ReissueCertificate
certificate=CZ00001
csrX=...

Certificate before the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE
Sub:			CZ00001-002		ACTIVE	<-- this sub will be reissued

Certificate after the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE
Sub:			CZ00001-002		ACTIVE
Sub:			CZ00001-003		ACTIVE	<-- this is the reissued sub

Example 3:

The explicitly stated sub will be reissued.

Command

[Command]
command=ReissueCertificate
certificate=CZ00001
sub=CZ00001-001
csrX=...

Certificate before the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE	<-- this sub will be reissued
Sub:			CZ00001-002		ACTIVE

Certificate after the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE
Sub:			CZ00001-002		ACTIVE
Sub:			CZ00001-003		ACTIVE	<-- this is the reissued sub

DeleteCertificate

The DeleteCertificate command can be used to revoke a certificate.

Example 1:

No sub has been explicitly stated, the newest active certificate will be revoked.

Command

command=DeleteCertificate
certificate=CZ00001

Certificate before the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE
Sub:			CZ00001-002		ACTIVE	<-- this sub will be revoked

Certificate after the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE
Sub:			CZ00001-002		REVOKED

Example 2:

The explicitly stated sub will be reissued.

Command

command=DeleteCertificate
certificate=CZ00001
sub=CZ00001-001

Certificate before the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		ACTIVE	<-- this sub will be revoked
Sub:			CZ00001-002		ACTIVE

Certificate after the command has been issued:

Command

Certificate:		CZ00001
Sub:			CZ00001-001		REVOKED
Sub:			CZ00001-002		ACTIVE