Documentation Index
Fetch the complete documentation index at: https://mintlify.com/lamassuiot/lamassuiot/llms.txt
Use this file to discover all available pages before exploring further.
Overview
The Certificate Authority (CA) API provides comprehensive functionality for managing PKI infrastructure in the Lamassu IoT Platform. This API enables you to create and manage certificate authorities, issue and revoke certificates, configure issuance profiles, and monitor statistics.Base URL
Authentication
All endpoints require JWT Bearer token authentication:Core Capabilities
Certificate Authorities
Create, import, and manage certificate authorities
Certificates
Sign, list, revoke, and manage certificates
Issuance Profiles
Configure certificate issuance templates
Statistics
Monitor CA and certificate metrics
Key Features
- CA Lifecycle Management: Create new CAs, import existing ones, reissue CA certificates
- Certificate Operations: Sign CSRs, list certificates by status or expiration, revoke certificates
- Flexible Issuance Profiles: Define reusable certificate templates with key usage, validity, and crypto enforcement
- Advanced Filtering: Query resources with pagination, sorting, and filtering support
- Metadata Management: Attach and update custom metadata on CAs and certificates
- Signature Operations: Sign and verify arbitrary messages using CA private keys
Common Parameters
Many list endpoints support these query parameters:Number of results per page
Pagination cursor from previous response
Field to sort results by
Sort order:
asc or descFilter expression using
field[operand]value formatExample: status[eq]=ACTIVEResponse Format
All error responses follow this format:Certificate Status Values
Certificates can have the following statuses:ACTIVE- Certificate is valid and activeEXPIRED- Certificate has expiredREVOKED- Certificate has been revokedINACTIVE- Certificate is inactive
Certificate Types
MANAGED- Certificate managed by LamassuIMPORTED_WITH_KEY- Imported certificate with private keyIMPORTED_WITHOUT_KEY- Imported certificate without private key
