Class IssueCertificateCommandProtected

Uses your private certificate authority (CA), or one that has been shared with you, to issue a client certificate. This action returns the Amazon Resource Name (ARN) of the certificate. You can retrieve the certificate by calling the GetCertificate action and specifying the ARN.

You cannot use the ACM ListCertificateAuthorities action to retrieve the ARNs of the certificates that you issue by using Amazon Web Services Private CA.

Example

Use a bare-bones client and the command you need to make an API call.

import { ACMPCAClient, IssueCertificateCommand } from "@aws-sdk/client-acm-pca"; // ES Modules import
// const { ACMPCAClient, IssueCertificateCommand } = require("@aws-sdk/client-acm-pca"); // CommonJS import
const client = new ACMPCAClient(config);
const command = new IssueCertificateCommand(input);
const response = await client.send(command);

Param

IssueCertificateCommandInput

Returns

IssueCertificateCommandOutput

See

• IssueCertificateCommandInput for command's input shape.
• IssueCertificateCommandOutput for command's response shape.
• config for ACMPCAClient's config shape.

Throws

InvalidArgsException (client fault)

One or more of the specified arguments was not valid.

Throws

InvalidArnException (client fault)

The requested Amazon Resource Name (ARN) does not refer to an existing resource.

Throws

InvalidStateException (client fault)

The state of the private CA does not allow this action to occur.

Throws

LimitExceededException (client fault)

An Amazon Web Services Private CA quota has been exceeded. See the exception message returned to determine the quota that was exceeded.

Throws

MalformedCSRException (client fault)

The certificate signing request is invalid.

Throws

ResourceNotFoundException (client fault)

A resource such as a private CA, S3 bucket, certificate, audit report, or policy cannot be found.