Skip to main content
POST
Register a certificate reference

Autorizações

Authorization
string
header
obrigatório

JWT bearer token issued by the identity provider.

Cabeçalhos

X-Idempotency
string
obrigatório

Idempotency key for this state-changing request (required, max 255 characters).

Maximum string length: 255

Corpo

application/json
custodyReference
string
obrigatório

Reference locating the private key in the FI's custody (HSM/KMIP).

publicCertificatePem
string
obrigatório

PEM-encoded public certificate. The private key is NOT transmitted.

sfnCertificateId
string
obrigatório

Exact 64-hex C11 identity assigned to this certificate: the hex encoding of the 32-byte slot, whose content is the certificate serial in uppercase ASCII hex, right-aligned and zero-left-padded. No ISPB. Unique only within the authority derived from the certificate.

Required string length: 64

Resposta

Created

authorityCode
integer<int64>
obrigatório

BACEN certificate-authority code (C10/C12 on the SFN wire): 1 SPB-Serpro, 2 SPB-Certisign, 3 Pessoas Fisicas, 4 SPB-Serasa, 5 SPB-CAIXA, 6 SPB-Valid, 7 SPB-Soluti. Derived from the certificate's own ISSUER block (OU=CSPB-N), never supplied. sfnCertificateId is unique only WITHIN this authority, so the two together are the identity.

daysToExpiry
integer<int64>
obrigatório

Whole days until expiry (0 the day it lapses, negative once expired). Always present — a real 0 is the most urgent operator signal.

id
string<uuid>
obrigatório

Certificate id.

notAfter
string<date-time>
obrigatório

Validity end (expiry).

sfnCertificateId
string
obrigatório

Exact 64-hex C11 identity used on the SFN wire: the hex encoding of the 32-byte slot, whose content is the certificate serial in uppercase ASCII hex, right-aligned and zero-left-padded. No ISPB. Unique only within authorityCode.

subject
string
obrigatório

Certificate subject DN.

Exemplo:

"CN=46026562, OU=SILOC"

custodyReference
string

Opaque reference to the private key in the FI's custody; the key itself is never stored here.

notBefore
string<date-time>

Validity start.

revokedAt
string<date-time>

Revocation time. Omitted while the certificate is active.

serialNumber
string

Certificate serial number.