< Back
New-ACMECertificate
Post
NAME New-ACMECertificate
SYNOPSIS
Initiates a request to issue a request for previously authorized Identifier.
SYNTAX
New-Certificate [-IdentifierRef] <string> -KeyPemFile <string> -CsrPemFile <string> [-Alias <string>] [-Label
<string>] [-Memo <string>] [-VaultProfile <string>] [<CommonParameters>]
New-Certificate [-IdentifierRef] <string> -Generate <SwitchParameter> [-CsrDetails <Hashtable>]
[-AlternativeIdentifierRefs <IEnumerable`1>] [-Alias <string>] [-Label <string>] [-Memo <string>] [-VaultProfile
<string>] [<CommonParameters>]
DESCRIPTION
This cmdlet is used to request a new certificate for a DNS Identifier that has already been verified by the ACME
CA Server. It is also used to import, generate or define the certificate parameters and artifacts needed for the
request, such as the private key and CSR details.
PARAMETERS
-IdentifierRef <string>
A reference (ID or alias) to a previously defined and authorized Identifier verified by the ACME CA Server.
Required? true
Position? 0
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Identifier <string>
A reference (ID or alias) to a previously defined and authorized Identifier verified by the ACME CA Server.
This is an alias of the IdentifierRef parameter.
Required? true
Position? 0
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Ref <string>
A reference (ID or alias) to a previously defined and authorized Identifier verified by the ACME CA Server.
This is an alias of the IdentifierRef parameter.
Required? true
Position? 0
Default value
Accept pipeline input? false
Accept wildcard characters? false
-KeyPemFile <string>
Specifies an existing private key in PEM file format that should be used to generate the Certificate Request.
Required? true
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-CsrPemFile <string>
Specifies an existing CSR in PEM file format containing all the details of the Certificate that should be used
to generate the Certificate Request.
Required? true
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Generate <SwitchParameter>
Indicates that new Certificate Request parameters and artificats should be generated.
Required? true
Position? named
Default value False
Accept pipeline input? false
Accept wildcard characters? false
-CsrDetails <Hashtable>
An optional set of certificate details to be included in the generated CSR.
The common name will be set based on the DNS name of the associated Identifier, however all other details will
be specified as set in this parameter. The following elements are defined, however not all of these may be
supported or honored by the target ACME CA Server: * Country; // C; * StateOrProvince; // ST; * Locality; //
L; * Organization; // O; * OrganizationUnit; // OU; * Description; // D; * Surname; // S; * GivenName; // G; *
Initials; // I; * Title; // T; * SerialNumber; // SN; * UniqueIdentifier; // UID; * AlternativeNames; // X509
SAN Extension (manually overridden)
For any elements that except multiple values (such as SAN), specify a string of values separated by space,
comma or semicolon
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-AlternativeIdentifierRefs <IEnumerable`1>
A collection of one or more references (ID or alias) to previously defined and authorized Identifiers verified
by the ACME CA Server which will be included in the X509 extension for the list of Subject Alternative Names
(SAN).
There is no need to repeat the reference to the primary common name Identifier as it will be automatically
included at the start of this list.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-AltIdentifiers <IEnumerable`1>
A collection of one or more references (ID or alias) to previously defined and authorized Identifiers verified
by the ACME CA Server which will be included in the X509 extension for the list of Subject Alternative Names
(SAN).
There is no need to repeat the reference to the primary common name Identifier as it will be automatically
included at the start of this list.
This is an alias of the AlternativeIdentifierRefs parameter.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-AltRefs <IEnumerable`1>
A collection of one or more references (ID or alias) to previously defined and authorized Identifiers verified
by the ACME CA Server which will be included in the X509 extension for the list of Subject Alternative Names
(SAN).
There is no need to repeat the reference to the primary common name Identifier as it will be automatically
included at the start of this list.
This is an alias of the AlternativeIdentifierRefs parameter.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Alias <string>
An optional, unique alias to assign to the Certificate for future reference.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Label <string>
An optional, human-friendly label to assign to the Certificate for easy recognition.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Memo <string>
An optional, arbitrary text field to capture any notes or details associated with the Certificate.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-VaultProfile <string>
Specifies a Vault profile name that will resolve to the Vault instance to be used for all related operations
and storage/retrieval of all related assets.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
OUTPUTS
ACMESharp.Vault.Model.CertificateInfo
RELATED LINKS
New-Identifier
Complete-Challenge
SYNOPSIS
Initiates a request to issue a request for previously authorized Identifier.
SYNTAX
New-Certificate [-IdentifierRef] <string> -KeyPemFile <string> -CsrPemFile <string> [-Alias <string>] [-Label
<string>] [-Memo <string>] [-VaultProfile <string>] [<CommonParameters>]
New-Certificate [-IdentifierRef] <string> -Generate <SwitchParameter> [-CsrDetails <Hashtable>]
[-AlternativeIdentifierRefs <IEnumerable`1>] [-Alias <string>] [-Label <string>] [-Memo <string>] [-VaultProfile
<string>] [<CommonParameters>]
DESCRIPTION
This cmdlet is used to request a new certificate for a DNS Identifier that has already been verified by the ACME
CA Server. It is also used to import, generate or define the certificate parameters and artifacts needed for the
request, such as the private key and CSR details.
PARAMETERS
-IdentifierRef <string>
A reference (ID or alias) to a previously defined and authorized Identifier verified by the ACME CA Server.
Required? true
Position? 0
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Identifier <string>
A reference (ID or alias) to a previously defined and authorized Identifier verified by the ACME CA Server.
This is an alias of the IdentifierRef parameter.
Required? true
Position? 0
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Ref <string>
A reference (ID or alias) to a previously defined and authorized Identifier verified by the ACME CA Server.
This is an alias of the IdentifierRef parameter.
Required? true
Position? 0
Default value
Accept pipeline input? false
Accept wildcard characters? false
-KeyPemFile <string>
Specifies an existing private key in PEM file format that should be used to generate the Certificate Request.
Required? true
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-CsrPemFile <string>
Specifies an existing CSR in PEM file format containing all the details of the Certificate that should be used
to generate the Certificate Request.
Required? true
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Generate <SwitchParameter>
Indicates that new Certificate Request parameters and artificats should be generated.
Required? true
Position? named
Default value False
Accept pipeline input? false
Accept wildcard characters? false
-CsrDetails <Hashtable>
An optional set of certificate details to be included in the generated CSR.
The common name will be set based on the DNS name of the associated Identifier, however all other details will
be specified as set in this parameter. The following elements are defined, however not all of these may be
supported or honored by the target ACME CA Server: * Country; // C; * StateOrProvince; // ST; * Locality; //
L; * Organization; // O; * OrganizationUnit; // OU; * Description; // D; * Surname; // S; * GivenName; // G; *
Initials; // I; * Title; // T; * SerialNumber; // SN; * UniqueIdentifier; // UID; * AlternativeNames; // X509
SAN Extension (manually overridden)
For any elements that except multiple values (such as SAN), specify a string of values separated by space,
comma or semicolon
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-AlternativeIdentifierRefs <IEnumerable`1>
A collection of one or more references (ID or alias) to previously defined and authorized Identifiers verified
by the ACME CA Server which will be included in the X509 extension for the list of Subject Alternative Names
(SAN).
There is no need to repeat the reference to the primary common name Identifier as it will be automatically
included at the start of this list.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-AltIdentifiers <IEnumerable`1>
A collection of one or more references (ID or alias) to previously defined and authorized Identifiers verified
by the ACME CA Server which will be included in the X509 extension for the list of Subject Alternative Names
(SAN).
There is no need to repeat the reference to the primary common name Identifier as it will be automatically
included at the start of this list.
This is an alias of the AlternativeIdentifierRefs parameter.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-AltRefs <IEnumerable`1>
A collection of one or more references (ID or alias) to previously defined and authorized Identifiers verified
by the ACME CA Server which will be included in the X509 extension for the list of Subject Alternative Names
(SAN).
There is no need to repeat the reference to the primary common name Identifier as it will be automatically
included at the start of this list.
This is an alias of the AlternativeIdentifierRefs parameter.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Alias <string>
An optional, unique alias to assign to the Certificate for future reference.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Label <string>
An optional, human-friendly label to assign to the Certificate for easy recognition.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Memo <string>
An optional, arbitrary text field to capture any notes or details associated with the Certificate.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-VaultProfile <string>
Specifies a Vault profile name that will resolve to the Vault instance to be used for all related operations
and storage/retrieval of all related assets.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
OUTPUTS
ACMESharp.Vault.Model.CertificateInfo
RELATED LINKS
New-Identifier
Complete-Challenge