Upload Certificate

curl --request POST \
  --url http://localhost:8000/issuers/{issuer_id}/certificates \
  --header 'Content-Type: multipart/form-data' \
  --form 'file=<string>' \
  --form 'password=<string>'

{
  "created_at": "2024-01-01T00:00:00Z",
  "id": "990e8400-e29b-41d4-a716-446655440000",
  "issuer_id": "550e8400-e29b-41d4-a716-446655440000",
  "serial_number": "1234567890ABCDEF",
  "status": "active",
  "subject_cn": "EMPRESA EJEMPLO S.A.",
  "tenant_id": "660e8400-e29b-41d4-a716-446655440000",
  "updated_at": "2024-01-01T00:00:00Z",
  "valid_from": "2024-01-01T00:00:00Z",
  "valid_until": "2026-01-01T00:00:00Z"
}

certificates

Upload Certificate

Upload a new .p12 certificate for an Issuer.

Validates the certificate, extracts metadata, uploads the encrypted file to object storage, stores the password in Secret Manager, and creates a certificate record in the database.

All database operations use async/await for non-blocking I/O.

Args: issuer_id: UUID of the parent issuer file: .p12 certificate file password: Certificate password db: Async database session tenant_id: Active tenant ID from authentication context user_id: Current user ID for auditing

Returns: CertificateResponse: Created certificate data (without sensitive info)

Raises: HTTPException 404: If issuer not found or doesn’t belong to tenant HTTPException 422: If certificate is invalid or validation fails

POST

issuers

{issuer_id}

certificates

Upload Certificate

curl --request POST \
  --url http://localhost:8000/issuers/{issuer_id}/certificates \
  --header 'Content-Type: multipart/form-data' \
  --form 'file=<string>' \
  --form 'password=<string>'

{
  "created_at": "2024-01-01T00:00:00Z",
  "id": "990e8400-e29b-41d4-a716-446655440000",
  "issuer_id": "550e8400-e29b-41d4-a716-446655440000",
  "serial_number": "1234567890ABCDEF",
  "status": "active",
  "subject_cn": "EMPRESA EJEMPLO S.A.",
  "tenant_id": "660e8400-e29b-41d4-a716-446655440000",
  "updated_at": "2024-01-01T00:00:00Z",
  "valid_from": "2024-01-01T00:00:00Z",
  "valid_until": "2026-01-01T00:00:00Z"
}

Headers

authorization

string | null

x-api-key

string | null

x-tenant-id

string | null

Path Parameters

issuer_id

string<uuid>

required

Cookies

factio_access_token

string | null

Body

multipart/form-data

file

string

required

.p12 certificate file

password

string

required

Certificate password

Response

Successful Response

Schema for Certificate response (without sensitive data).

string<uuid>

required

tenant_id

string<uuid>

required

issuer_id

string<uuid>

required

subject_cn

string | null

required

serial_number

string | null

required

valid_from

string<date-time>

required

valid_until

string<date-time>

required

status

enum<string>

required

Status values for digital certificates.

Available options:

uploaded,

active,

expiring,

expired,

revoked,

disabled

created_at

string<date-time>

required

updated_at

string<date-time>

required

List Certificates Get Certificate