POST /v1/certify
Apply a PKCS#7 detached digital signature to a PDF. This cryptographically proves the document has not been tampered with since certification and identifies the certifier.
Request Body
*Either
certificatePem + privateKeyPem or certificateId is required.
Using Inline Certificates
Pass the certificate and private key directly in the request body:Using Saved Certificates
On the hosted API, you can save certificates in Credentials and reference them by ID. This avoids sending private keys in every request.Saved certificates are not available on self-hosted instances. Pass
certificatePem and privateKeyPem directly.Response
200 OK with Content-Type: application/pdf — the certified PDF.
Related
- Digital Certification — certifying at render time, visible signatures, known limitations
- Credentials & Certificates — managing saved certificates