Register a certificate reference
Registers the public certificate + custody reference for lifecycle tracking. The private key is never transmitted.
Autorizaciones
JWT bearer token issued by the identity provider.
Encabezados
Idempotency key for this state-changing request (required, max 255 characters).
255Cuerpo
Reference locating the private key in the FI's custody (HSM/KMIP).
PEM-encoded public certificate. The private key is NOT transmitted.
Exact 64-hex C11 identity assigned to this certificate: the hex encoding of the 32-byte slot, whose content is the certificate serial in uppercase ASCII hex, right-aligned and zero-left-padded. No ISPB. Unique only within the authority derived from the certificate.
64Respuesta
Created
BACEN certificate-authority code (C10/C12 on the SFN wire): 1 SPB-Serpro, 2 SPB-Certisign, 3 Pessoas Fisicas, 4 SPB-Serasa, 5 SPB-CAIXA, 6 SPB-Valid, 7 SPB-Soluti. Derived from the certificate's own ISSUER block (OU=CSPB-N), never supplied. sfnCertificateId is unique only WITHIN this authority, so the two together are the identity.
Whole days until expiry (0 the day it lapses, negative once expired). Always present — a real 0 is the most urgent operator signal.
Certificate id.
Validity end (expiry).
Exact 64-hex C11 identity used on the SFN wire: the hex encoding of the 32-byte slot, whose content is the certificate serial in uppercase ASCII hex, right-aligned and zero-left-padded. No ISPB. Unique only within authorityCode.
Certificate subject DN.
"CN=46026562, OU=SILOC"
Opaque reference to the private key in the FI's custody; the key itself is never stored here.
Validity start.
Revocation time. Omitted while the certificate is active.
Certificate serial number.

