> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scanova.io/llms.txt
> Use this file to discover all available pages before exploring further.
# Crear una solicitud de certificado SSL
> POST /custom-domain/{pk}/certificate-request/
Genera una nueva solicitud de firma de certificado (CSR) SSL para un dominio, en el host de la **API de gestión** (`api.scanova.io`), autenticado con su clave de API de gestión sin procesar.
```
POST https://api.scanova.io/custom-domain/{pk}/certificate-request/
Authorization: 401f7ac837da42b97f613d789819ff93537bee6a
```
Solo Enterprise. Requiere la cuota `CUSTOM_DOMAIN_CUSTOM_SSL`, que se otorga manualmente — ningún plan de autoservicio la incluye.
El `id` del dominio.
Nombre de la organización para el sujeto del certificado.
Unidad organizativa para el sujeto del certificado.
Código de país ISO de 2 letras — se convierte a mayúsculas automáticamente; se rechaza si no son exactamente 2 caracteres alfabéticos.
Estado o provincia.
Ciudad o localidad.
Correo de contacto para el sujeto del certificado.
```bash cURL theme={null}
curl -X POST "https://api.scanova.io/custom-domain/42/certificate-request/" \
-H "Authorization: 401f7ac837da42b97f613d789819ff93537bee6a" \
-H "Content-Type: application/json" \
-d '{
"organization": "Example Inc",
"organizational_unit": "IT",
"country": "us",
"state": "CA",
"locality": "San Francisco",
"email": "ssl@example.com"
}'
```
```json 201 theme={null}
{
"id": 5,
"organization": "Example Inc",
"organizational_unit": "IT",
"country": "US",
"state": "CA",
"locality": "San Francisco",
"email": "ssl@example.com",
"csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIIC...\n-----END CERTIFICATE REQUEST-----",
"created": "2026-09-08T09:00:00Z"
}
```
Una clave privada y la CSR se generan en el servidor — la clave privada nunca se devuelve por ningún endpoint ni se acepta como entrada, solo se devuelve el texto de la CSR. Envíe la `csr` devuelta a su autoridad certificadora, y luego traiga de vuelta el certificado emitido mediante [Subir un certificado SSL](/es/api-reference/management-api/custom-domain/ssl-certificate-upload).
`400` si `country` no son exactamente 2 caracteres alfabéticos. `403` si a la cuenta le falta la cuota `CUSTOM_DOMAIN_CUSTOM_SSL`.
## Relacionado
* [Obtener la última solicitud de certificado SSL](/es/api-reference/management-api/custom-domain/certificate-request-retrieve) — reanudar un flujo en curso.
* [Subir un certificado SSL](/es/api-reference/management-api/custom-domain/ssl-certificate-upload) — el siguiente paso una vez que su CA emite el certificado.
* [Resumen de la API de gestión](/es/api-reference/management-api/overview) — el esquema de autenticación y las reglas de cuota aplicables a este endpoint.
## OpenAPI
````yaml api-reference/openapi/management-api.json POST /custom-domain/{pk}/certificate-request/
openapi: 3.1.0
info:
title: Scanova Management API (v2)
description: >-
The complete Scanova Management API — every endpoint available at
api.scanova.io (QR codes, folders, tags, leads, forms, analytics, plans,
shared users & roles), plus the token-creation and usage-stats endpoints
used to authenticate against it. Every path and request/response shape below
was verified live against a real API key and the actual running backend
(Phase 7, 2026-08-16) — not guessed from reading urls.py alone.
version: 2.0.0
servers:
- url: https://api.scanova.io
description: Management API — QR/folder/tag/lead/form/analytics/plans endpoints
security:
- apiKeyAuth: []
paths:
/custom-domain/{pk}/certificate-request/:
post:
summary: Create an SSL certificate request (CSR)
description: >-
Generates a private key and CSR server-side for this domain — the
private key is never returned or accepted as input. `country` must be a
2-letter ISO code (uppercased automatically).
operationId: createCertificateRequest
parameters:
- name: pk
in: path
required: true
schema:
type: integer
requestBody:
content:
application/json:
example:
organization: Example Inc
organizational_unit: IT
country: us
state: CA
locality: San Francisco
email: ssl@example.com
responses:
'201':
description: CSR created.
content:
application/json:
example:
id: 5
organization: Example Inc
organizational_unit: IT
country: US
state: CA
locality: San Francisco
email: ssl@example.com
csr: >-
-----BEGIN CERTIFICATE REQUEST-----\nMIIC...\n-----END
CERTIFICATE REQUEST-----
created: '2026-09-08T09:00:00Z'
'400':
description: '`country` is not a 2-letter alphabetic code.'
'403':
description: Missing CUSTOM_DOMAIN_CUSTOM_SSL quota.
components:
securitySchemes:
apiKeyAuth:
type: apiKey
in: header
name: Authorization
description: >-
Send your Management API key as the raw value of the Authorization
header — no "Bearer " or "Token " prefix, and no other characters.
Example: `Authorization: 401f7ac837da42b97f613d789819ff93537bee6a`. A
header containing more than one space-separated part is rejected
outright. Requests also require the request's Host header to be the
management API host (e.g. api.scanova.io) — the same key sent to the
regular API host will not authenticate.
````