Skip to main content
POST /v1/certify Apply a PKCS#7 detached digital signature to a PDF. This cryptographically proves the document has not been tampered with since certification and identifies the certifier.

Request Body

*Either certificatePem + privateKeyPem or certificateId is required.

Using Inline Certificates

Pass the certificate and private key directly in the request body:

Using Saved Certificates

On the hosted API, you can save certificates in Credentials and reference them by ID. This avoids sending private keys in every request.
Saved certificates are not available on self-hosted instances. Pass certificatePem and privateKeyPem directly.

Response

200 OK with Content-Type: application/pdf — the certified PDF.