When using the enrollments endpoint to request a certificate from a GlobalSign CA, the profileId parameter must identify a GlobalSign MSSL (Managed SSL) profile. See below for the supported issuance modes.
Issuance mode | profileId |
|---|---|
A PKCS #12 containing a certificate and key pair generated by the CA | The identifier of a profile that includes the PV_INTRA_SKIP or PV_INTRA_SKIP_SHA2 product codes |
A certificate for a client‑generated key pair and CSR | The identifier of a profile that includes any other product codes |
For example:
{ "csr": "...", "includeCa": false, "optionalCertificateRequestDetails": { "subjectDn": "cn=grapefruitdesk.com,o=Test Company,c=CA", "useSANFromCSR": false, "validityPeriod": "P1Y0M0D" }, "profileId": "profileA", "renewal": true, "requiredFormat": { "format": "pem" }}