Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/lamassuiot/lamassuiot/llms.txt

Use this file to discover all available pages before exploring further.

Overview

The Certificate Authority (CA) API provides comprehensive functionality for managing PKI infrastructure in the Lamassu IoT Platform. This API enables you to create and manage certificate authorities, issue and revoke certificates, configure issuance profiles, and monitor statistics.

Base URL

/api/ca/v1

Authentication

All endpoints require JWT Bearer token authentication:
Authorization: Bearer <your-jwt-token>

Core Capabilities

Certificate Authorities

Create, import, and manage certificate authorities

Certificates

Sign, list, revoke, and manage certificates

Issuance Profiles

Configure certificate issuance templates

Statistics

Monitor CA and certificate metrics

Key Features

  • CA Lifecycle Management: Create new CAs, import existing ones, reissue CA certificates
  • Certificate Operations: Sign CSRs, list certificates by status or expiration, revoke certificates
  • Flexible Issuance Profiles: Define reusable certificate templates with key usage, validity, and crypto enforcement
  • Advanced Filtering: Query resources with pagination, sorting, and filtering support
  • Metadata Management: Attach and update custom metadata on CAs and certificates
  • Signature Operations: Sign and verify arbitrary messages using CA private keys

Common Parameters

Many list endpoints support these query parameters:
page_size
integer
default:"25"
Number of results per page
bookmark
string
Pagination cursor from previous response
sort_by
string
Field to sort results by
sort_mode
string
Sort order: asc or desc
filter
string
Filter expression using field[operand]value formatExample: status[eq]=ACTIVE

Response Format

All error responses follow this format:
{
  "err": "Error description"
}
List responses use pagination:
{
  "list": [...],
  "next": "pagination-bookmark-string"
}

Certificate Status Values

Certificates can have the following statuses:
  • ACTIVE - Certificate is valid and active
  • EXPIRED - Certificate has expired
  • REVOKED - Certificate has been revoked
  • INACTIVE - Certificate is inactive

Certificate Types

  • MANAGED - Certificate managed by Lamassu
  • IMPORTED_WITH_KEY - Imported certificate with private key
  • IMPORTED_WITHOUT_KEY - Imported certificate without private key