eIDAS certificate

Endpoint: !PlaceOrder

https://secure.trust-provider.com/products/!PlaceOrder

For GET requests, submit parameters in the query string.

For POST requests, submit parameters in application/x-www-form-urlencoded format.

Request parameters

The following table displays the required, optional, and conditional parameters.

Parameter Requirement Type Max.Length Description

Parameter	Requirement	Type	Max.Length	Description
Reseller details
`ap`	required	string	64 chars	The Reseller brand name.
`reseller`	required	char		Specifies who charges the end-customer for the order. The allowed values are: `Y` — You will charge the end-customer. Sectigo will then debit your account funds. `N` — Sectigo will charge the end-customer.
`errorURL`	optional	string	255 chars	A URL the browser will be redirected to if an error occurs.
`successURL`	optional	string	255 chars	A URL the browser will be redirected to if the order is placed successfully.
`region`	optional	string	64 chars	The region of the world the order is being placed from. If omitted, the value defaults to `Unknown`.
`isReturningCustomer`	optional	char		Specifies whether the customer placing the order is new or already in the system. The allowed values are: `Y` — This customer already has an account. `N` — This is a new customer. This parameter is only relevant when `loginName` and `loginPassword` are being used.
`product`	optional	string		A comma-separated list of product codes. This is used by the Ordering URLs page, to allow you and your customers to place orders interactively, without the need to 'integrate' this API endpoint into your website.
`offerCode`	optional	string	64 chars	Specifies values related to offers and provided in cases of special pricing or when extra products are added. The allowed values are: `FREE_EV_UPGRADE` `FREE_EV_UPGRADE_REQUIRED` `EVSSLPREREGISTRATIONOFFER`
Company address details
Many products do not require an address to be specified. In cases where it is required, a state or province name may be omitted if `LocalityName` is specified, and vice versa.
For returning customers, any address details supplied here will replace any details supplied on previous occasions.
`organizationName`	optional	string	64 chars	The organization name.
`organizationalUnitName`	optional	string	64 chars	The organizational unit name.
`postOfficeBox`	optional	string	40 chars	The organization post office box.
`streetAddress1`	optional	string	128 chars	The street address where the organization operates.
`streetAddress2`	optional	string	128 chars	The second part of the company’s street address (if necessary).
`streetAddress3`	optional	string	128 chars	The third part of the company’s street address (if necessary).
`localityName`	optional	string	128 chars	The city in which the organization operates.
`stateOrProvinceName`	optional	string	128 chars	The state or province in which the organization operates.
`postalCode`	optional	string	40 chars	The company’s postal code.
`countryName` or `country`	optional	string	2 chars	The ISO 3166 two-character code for the country where the organization operates. If omitted, the value defaults to `US`.
Other company details
`dunsNumber`	optional	string	20 chars	A unique nine-digit identifier for businesses, provided by the company Dun & Bradstreet.
`companyNumber`	optional	string	64 chars	The company registration number.
`joiLocalityName`	optional	string	128 chars	(QWAC Legal only) The jurisdiction of the city in which the organization operates.
`joistateorProvinceName`	optional	string	128 chars	(QWAC Legal only) The jurisdiction of the state or province in which the organization operates.
`joiCountryName`	optional	string	2 chars	(QWAC Legal only) The ISO 3166 two-character code for the jurisdiction of the country in which the company operates.
`dateOfIncorporation`	optional	string	10 chars	(QWAC Legal only) The date of incorporation (`YYYY-MM-DD`) of the company. This is useful information for validation purposes.
`AssumedName`	optional	string	64 chars	(QWAC Legal only) An optional name under which the organization operates that is different from its legal name. This is a so-called DBA (doing business as) name for the company (if any).
`BusinessCategory`	optional	char	1 char	The legal classification of the organization. The allowed values are: `b` — Private `c` — Government `d` — Business Entity
`x_organizationIdentifier`	optional	string	100 chars	The organization identifier, or the PSD2 Authorization Identifier recognized by the National Competent Authority (NCA). This parameter is required for: eIDAS Employee, Seal (including for PSD2) Qualified Certificate Profiles eIDAS QWAC-legal (including for PSD2) Qualified Certificate Profiles For more information, see `organizationIdentifier` parameter structure.
User personal details
`title`	optional	string	64 chars	The customer’s title (for example, Mr, Mrs, Dr, etc).
`name`	conditional	string	128 chars	The customer’s full name. If `foreName` or `surName` are specified, `name` is not required.
`foreName`	conditional	string	64 chars	The customer’s first name. If `name` is specified, `foreName` and `surName` are not required.
`surName`	conditional	string	64 chars	The customer’s last name. If `name` is specified, `foreName` and `surName` are not required.
`emailAddress`	required	string	255 chars	The customer’s email address. If `isReturningCustomer` is not specified, the system determines the customer type as follows: Presence of `emailAddress` indicates a new customer. Absence of `emailAddress` indicates a returning customer.
`telephoneNumber`	optional	string	32 chars	The customer’s telephone number.
`faxNumber`	optional	string	32 chars	The customer’s fax number.
User login details
`loginName`	required	string	64 chars	Your account username. This value is case sensitive.
`loginPassword`	required	string	128 chars	Your account password. This value is case sensitive.
Shipping details
`shippingOrganizationName`	optional	string	64 chars	Specifies the organization name required for shipping.
`shippingOrganizationalUnitName`	optional	string	64 chars	Specifies the organizational unit name required for shipping.
`shippingStreetAddress1`	optional	string	128 chars	Specifies the street address required for shipping.
`shippingStreetAddress2`	optional	string	128 chars	Specifies the second part of the street address required for shipping.
`shippingStreetAddress3`	optional	string	128 chars	Specifies the third part of the street address required for shipping.
`shippingLocalityName`	optional	string	128 chars	Specifies the city required for shipping.
`shippingStateOrProvinceName`	optional	string	128 chars	Specifies the state or province required for shipping.
`shippingPostalCode`	optional	string	40 chars	Specifies the postal code required for shipping.
`shippingCountryName`	optional	string	2 chars	Specifies the country required for shipping. This parameter must be an ISO 3166 two-character country code.
`shippingTitle`	optional	string	64 chars	The customer’s title (for example, Mr, Mrs, Dr, etc.) to be specified as a contact person in the courier.
`shippingForename`	optional	string	64 chars	The customer’s first name to be specified as a contact person in the courier shipping document.
`shippingSurname`	optional	string	64 chars	The customer’s last name to be specified as a contact person in the courier shipping document.
`shippingEmailAddress`	optional	string	255 chars	The customer’s email address who should be specified as a contact person in the courier shipping document.
`shippingTelephone`	optional	string	32 chars	The customer’s telephone number to be specified as a contact person in the courier shipping document.

Reseller details

ap

required

string

64 chars

The Reseller brand name.

reseller

required

char

Specifies who charges the end-customer for the order.

The allowed values are:

Y — You will charge the end-customer. Sectigo will then debit your account funds.
N — Sectigo will charge the end-customer.

errorURL

optional

string

255 chars

A URL the browser will be redirected to if an error occurs.

successURL

optional

string

255 chars

A URL the browser will be redirected to if the order is placed successfully.

region

optional

string

64 chars

The region of the world the order is being placed from.

If omitted, the value defaults to Unknown.

isReturningCustomer

optional

char

Specifies whether the customer placing the order is new or already in the system.

The allowed values are:

Y — This customer already has an account.
N — This is a new customer.

This parameter is only relevant when loginName and loginPassword are being used.

product

optional

string

A comma-separated list of product codes. This is used by the Ordering URLs page, to allow you and your customers to place orders interactively, without the need to 'integrate' this API endpoint into your website.

offerCode

optional

string

64 chars

Specifies values related to offers and provided in cases of special pricing or when extra products are added.

The allowed values are:

FREE_EV_UPGRADE
FREE_EV_UPGRADE_REQUIRED
EVSSLPREREGISTRATIONOFFER

Company address details

Many products do not require an address to be specified. In cases where it is required, a state or province name may be omitted if LocalityName is specified, and vice versa.

For returning customers, any address details supplied here will replace any details supplied on previous occasions.

organizationName

optional

string

64 chars

The organization name.

organizationalUnitName

optional

string

64 chars

The organizational unit name.

postOfficeBox

optional

string

40 chars

The organization post office box.

streetAddress1

optional

string

128 chars

The street address where the organization operates.

streetAddress2

optional

string

128 chars

The second part of the company’s street address (if necessary).

streetAddress3

optional

string

128 chars

The third part of the company’s street address (if necessary).

localityName

optional

string

128 chars

The city in which the organization operates.

stateOrProvinceName

optional

string

128 chars

The state or province in which the organization operates.

postalCode

optional

string

40 chars

The company’s postal code.

countryName or country

optional

string

2 chars

The ISO 3166 two-character code for the country where the organization operates.

If omitted, the value defaults to US.

Other company details

dunsNumber

optional

string

20 chars

A unique nine-digit identifier for businesses, provided by the company Dun & Bradstreet.

companyNumber

optional

string

64 chars

The company registration number.

joiLocalityName

optional

string

128 chars

(QWAC Legal only) The jurisdiction of the city in which the organization operates.

joistateorProvinceName

optional

string

128 chars

(QWAC Legal only) The jurisdiction of the state or province in which the organization operates.

joiCountryName

optional

string

2 chars

(QWAC Legal only) The ISO 3166 two-character code for the jurisdiction of the country in which the company operates.

dateOfIncorporation

optional

string

10 chars

(QWAC Legal only) The date of incorporation (YYYY-MM-DD) of the company. This is useful information for validation purposes.

AssumedName

optional

string

64 chars

(QWAC Legal only) An optional name under which the organization operates that is different from its legal name. This is a so-called DBA (doing business as) name for the company (if any).

BusinessCategory

optional

char

1 char

The legal classification of the organization.

The allowed values are:

b — Private
c — Government
d — Business Entity

x_organizationIdentifier

optional

string

100 chars

The organization identifier, or the PSD2 Authorization Identifier recognized by the National Competent Authority (NCA).

This parameter is required for:

eIDAS Employee, Seal (including for PSD2) Qualified Certificate Profiles
eIDAS QWAC-legal (including for PSD2) Qualified Certificate Profiles

For more information, see organizationIdentifier parameter structure.

User personal details

title

optional

string

64 chars

The customer’s title (for example, Mr, Mrs, Dr, etc).

name

conditional

string

128 chars

The customer’s full name.

If foreName or surName are specified, name is not required.

foreName

conditional

string

64 chars

The customer’s first name.

If name is specified, foreName and surName are not required.

surName

conditional

string

64 chars

The customer’s last name.

If name is specified, foreName and surName are not required.

emailAddress

required

string

255 chars

The customer’s email address.

If isReturningCustomer is not specified, the system determines the customer type as follows:

Presence of emailAddress indicates a new customer.
Absence of emailAddress indicates a returning customer.

telephoneNumber

optional

string

32 chars

The customer’s telephone number.

faxNumber

optional

string

32 chars

The customer’s fax number.

User login details

loginName

required

string

64 chars

Your account username.

This value is case sensitive.

loginPassword

required

string

128 chars

Your account password.

This value is case sensitive.

Shipping details

shippingOrganizationName

optional

string

64 chars

Specifies the organization name required for shipping.

shippingOrganizationalUnitName

optional

string

64 chars

Specifies the organizational unit name required for shipping.

shippingStreetAddress1

optional

string

128 chars

Specifies the street address required for shipping.

shippingStreetAddress2

optional

string

128 chars

Specifies the second part of the street address required for shipping.

shippingStreetAddress3

optional

string

128 chars

Specifies the third part of the street address required for shipping.

shippingLocalityName

optional

string

128 chars

Specifies the city required for shipping.

shippingStateOrProvinceName

optional

string

128 chars

Specifies the state or province required for shipping.

shippingPostalCode

optional

string

40 chars

Specifies the postal code required for shipping.

shippingCountryName

optional

string

2 chars

Specifies the country required for shipping.

This parameter must be an ISO 3166 two-character country code.

shippingTitle

optional

string

64 chars

The customer’s title (for example, Mr, Mrs, Dr, etc.) to be specified as a contact person in the courier.

shippingForename

optional

string

64 chars

The customer’s first name to be specified as a contact person in the courier shipping document.

shippingSurname

optional

string

64 chars

The customer’s last name to be specified as a contact person in the courier shipping document.

shippingEmailAddress

optional

string

255 chars

The customer’s email address who should be specified as a contact person in the courier shipping document.

shippingTelephone

optional

string

32 chars

The customer’s telephone number to be specified as a contact person in the courier shipping document.

The parameters for shipping details are only relevant for token-based certificates.

If no parameters for shipping address are provided, the shipping address defaults to the organization address with the applicant representative specified as the contact person.

Though the shipping‑related parameters are optional, the absence of any parameter marked as 'required for shipping' will trigger an email to the applicant representative requesting the missing shipping details.

An account can contain multiple email templates for the certificate orders and/or provisioning of missing shipping details. Contact Support when needed.

When configured, the following parameters can be included in the request to identify the email template to be used.

Parameter Requirement Type Max.Length Description

Parameter	Requirement	Type	Max.Length	Description
`languageName`	optional	string	2 chars	Specifies the two-character code of the language for emails. An account can contain multiple email templates in different languages for emails. Contact Support for the email templates. There may be exactly one of the following values specified: `en` — English `zh` — Chinese-Mandarin `da` — Danish `nl` — Dutch `fr` — French `de` — German `it` — Italian `ja` — Japanese `ko` — Korean `pt` — Portuguese `ru` — Russian `es` — Spanish `sv` — Swedish `tr` — Turkish Any of the following parameters prevail over the `languageName` if provided: `shippingTemplateID` `agreementTemplateID`
`shippingTemplateID`	optional	integer		The shipping details email templates. `shippingTemplateID` prevails over `languageName` if both of these parameters are provided.
`agreementTemplateID`	optional	integer		Specifies the Subscriber Agreement email template ID to be used for the order. `agreementTemplateID` prevails over `languageName` if both of these parameters are provided.

languageName

optional

string

2 chars

Specifies the two-character code of the language for emails.

An account can contain multiple email templates in different languages for emails.

Contact Support for the email templates.

There may be exactly one of the following values specified:

en — English
zh — Chinese-Mandarin
da — Danish
nl — Dutch
fr — French
de — German
it — Italian
ja — Japanese
ko — Korean
pt — Portuguese
ru — Russian
es — Spanish
sv — Swedish
tr — Turkish

Any of the following parameters prevail over the languageName if provided:

shippingTemplateID
agreementTemplateID

shippingTemplateID

optional

integer

The shipping details email templates.

shippingTemplateID prevails over languageName if both of these parameters are provided.

agreementTemplateID

optional

integer

Specifies the Subscriber Agreement email template ID to be used for the order.

agreementTemplateID prevails over languageName if both of these parameters are provided.

Various parameters are required that define the product(s) being purchased. These vary considerably depending on the product(s).

The following table outlines a sample of the types of x_parameters.

The x in the following parameters is a placeholder for an integer indicating the item number. This allows multiple items to be purchased in a single order, so it should be possible to integrate this with shopping cart systems.

The first 'item number' is 1, the second 'item number' is 2 and so on. This means that either 1_ID or 1_PPP must be specified, because there must be at least one item in the order.

You may prepend an underscore to any of the x_parameters. This will be necessary if you need to reference such parameters in Javascript, because Javascript variables may not begin with a digit.

Parameter Requirement Type Max.Length Description

x_ID

conditional

integer

A product ID.

Some products require this parameter to be specified instead of x_PPP.

x_PPP

conditional

integer

A product pricing parameter.

Some products require this parameter to be specified instead of x_ID.

x_visibility

optional

integer

Specifies the visibility of the product in the control panel.

The allowed values are:

-1 (default) — Visible.
0 — Invisible.

x_days

conditional

integer

The number of days.

Its necessity is determined by the specific product.

x_seats, x_users, x_servers, x_quantity

required

integer

Indicates a quantity that affects the pricing.

This parameter is named depending on the product.

x_zones

required

integer

Indicates another quantity that affects the pricing.

This parameter is named depending on the product.

x_dcvEmailAddress

optional

string

32 chars

The selected method for Domain Control Validation.

The allowed values are:

<permitted email address>
HTTP CSR Hash
HTTPS CSR Hash
CNAME CSR Hash

If omitted, the value defaults to EMAIL.

For more information, see Domain Control Validation.

Continued use of email-based DCV methods is discouraged. In line with CA/B Forum Ballot SC-090, all email-based DCV methods are on a deprecation path, with full industry deprecation expected by early 2028.

Plan for earlier enforcement and migrate to DNS-based or HTTP-based validation methods in advance.

x_webserverSoftwareID

optional

integer

Specifies the web server software that will be used to host the certificate.

The allowed values are:

2 — Apache-ModSSL
10 — Java-based servers
14 — Microsoft IIS 5.x to 6.x
18 — Oracle
30 — Plesk
31 — WHM/cPanel
35 — Microsoft IIS 7.x and later
36 — nginx
-1 — Other

This parameter does not directly affect the certificate content.

Please use -1 as the default option.

x_smartCardBased

optional

char

1 char

(non-QWAC eIDAS only) Specifies whether you wish to get a certificate installed on a token.

The allowed values are:

Y — Provision the certificate on a token.
N — Provide the certificate for collection via API or email.

x_csr

required

string

32767 chars

The Base64-encoded certificate signing request (CSR), with or without the -----BEGIN xxxxx----- and -----END xxxxx----- header and footer.

For more information, see Certificate Signing Request.

x_personalIdentifier

optional

string

100 chars

The semantics information for attributes stored in the subject field related to natural person.

Required for eIDAS Citizen, Employee and QWAC Natural Qualified Certificate Profiles.

This parameter has a deprecated synonym — x_semanticsIdentifier, which is preserved for backwards compatibility.

For more information, see personalIdentifier parameter structure.

x_ncaIdentifier

optional

string

100 chars

An abbreviated unique identifier of the National Competent Authority (NCA).

Required for PSD2 Qualified Certificate Profiles.

This parameter must contain information using the following structure in the presented order:

The two-character ISO 3166-1 [8] country code representing the NCA country.
The hyphen-minus - (0x2D (ASCII), U+002D (UTF-8)).
2-8 character NCA identifier without country code, A-Z uppercase only, no separator.

For more information, see ncaIdentifier parameter structure.

x_ncaName

optional

char

100 char

The name of National Competent Authority in English that registered the payment service provider.

Required for PSD2 Qualified Certificate Profiles.

If omitted, the value is defined automatically based on the ncaIdentifier value provided in the request.

For more information, see ncaIdentifier parameter structure.

x_accountServicingRole

optional

char

1 char

Specifies a role of the payment service provider.

Required for PSD2 Qualified Certificate Profiles.

The allowed values are:

Y — Assign the role.
N — Do not assign the role.

At least one PSD role should be set to Y.

x_paymentInitiationRole

optional

char

1 char

Specifies a role of the payment service provider.

Required for PSD2 Qualified Certificate Profiles.

The allowed values are:

Y — Assign the role.
N — Do not assign the role.

x_accountInformationRole

optional

char

1 char

Specifies a role of the payment service provider.

Required for PSD2 Qualified Certificate Profiles.

The allowed values are:

Y — Assign the role.
N — Do not assign the role.

x_paymentServiceRole

optional

char

1 char

Specifies a role of the payment service provider.

Required for PSD2 Qualified Certificate Profiles.

The allowed values are:

Y — Assign the role.
N — Do not assign the role.

Product-specific parameters

eIDAS Natural Persons certificate parameters

The following table outlines the product-specific parameters for eIDAS certificates issued to Natural Persons.

QSCD in the certificate type name indicates that the private key and the related certificate must reside on a QSCD. For example, a certified and approved token designed for generating Qualified Electronic Signatures.

Product Name/Payment Description Product-Specific Parameters

Product Name/Payment Description	Product-Specific Parameters
Citizen Qualified Certificate
1-year	`x_PPP=6501`
2-year	`x_PPP=6502`
3-year	`x_PPP=6503`
4-year	`x_PPP=6504`
5-year	`x_PPP=6505`
Citizen Qualified Certificate QSCD
1-year	`x_PPP=6511`
2-year	`x_PPP=6512`
3-year	`x_PPP=6513`
4-year	`x_PPP=6514`
5-year	`x_PPP=6515`
Employee Qualified Certificate
1-year	`x_PPP=6521`
2-year	`x_PPP=6522`
3-year	`x_PPP=6523`
4-year	`x_PPP=6524`
5-year	`x_PPP=6525`
Employee Qualified Certificate QSCD
1-year	`x_PPP=6531`
2-year	`x_PPP=6532`
3-year	`x_PPP=6533`
4-year	`x_PPP=6534`
5-year	`x_PPP=6535`
QWAC Natural
90-day	`x_PPP=1249`
1-year	`x_PPP=6621`
2-year	`x_PPP=6622`
3-year	`x_PPP=6623`
4-year	`x_PPP=6624`
5-year	`x_PPP=6625`
QWAC Natural Multi-Domain
90-day	`x_PPP=4566`
1-year	`x_PPP=6631`
2-year	`x_PPP=6632`
3-year	`x_PPP=6633`
4-year	`x_PPP=6634`
5-year	`x_PPP=6635`

Citizen Qualified Certificate

1-year

x_PPP=6501

2-year

x_PPP=6502

3-year

x_PPP=6503

4-year

x_PPP=6504

5-year

x_PPP=6505

Citizen Qualified Certificate QSCD

1-year

x_PPP=6511

2-year

x_PPP=6512

3-year

x_PPP=6513

4-year

x_PPP=6514

5-year

x_PPP=6515

Employee Qualified Certificate

1-year

x_PPP=6521

2-year

x_PPP=6522

3-year

x_PPP=6523

4-year

x_PPP=6524

5-year

x_PPP=6525

Employee Qualified Certificate QSCD

1-year

x_PPP=6531

2-year

x_PPP=6532

3-year

x_PPP=6533

4-year

x_PPP=6534

5-year

x_PPP=6535

QWAC Natural

90-day

x_PPP=1249

1-year

x_PPP=6621

2-year

x_PPP=6622

3-year

x_PPP=6623

4-year

x_PPP=6624

5-year

x_PPP=6625

QWAC Natural Multi-Domain

90-day

x_PPP=4566

1-year

x_PPP=6631

2-year

x_PPP=6632

3-year

x_PPP=6633

4-year

x_PPP=6634

5-year

x_PPP=6635

eIDAS Legal Persons certificate parameters

The following table outlines the product-specific parameters for eIDAS certificates issued to Legal Persons.

Product Name Product-Specific Parameters

Product Name	Product-Specific Parameters
Seal Qualified Certificate
1-year	`x_PPP=6541`
2-year	`x_PPP=6542`
3-year	`x_PPP=6543`
4-year	`x_PPP=6544`
5-year	`x_PPP=6545`
Seal Qualified Certificate QSCD
1-year	`x_PPP=6551`
2-year	`x_PPP=6552`
3-year	`x_PPP=6553`
4-year	`x_PPP=6554`
5-year	`x_PPP=6555`
Seal for PSD2
1-year	`x_PPP=6581`
2-year	`x_PPP=6582`
3-year	`x_PPP=6583`
4-year	`x_PPP=6584`
5-year	`x_PPP=6585`
Seal for PSD2 QSCD
1-year	`x_PPP=6591`
2-year	`x_PPP=6592`
3-year	`x_PPP=6593`
4-year	`x_PPP=6594`
5-year	`x_PPP=6595`
QWAC Legal
90-day	`x_PPP=1247`
1-year	`x_PPP=6561`
2-year	`x_PPP=6562`
3-year	`x_PPP=6563`
4-year	`x_PPP=6564`
5-year	`x_PPP=6565`
QWAC Legal Multi-Domain
90-day	`x_PPP=4562`
1-year	`x_PPP=6571`
2-year	`x_PPP=6572`
3-year	`x_PPP=6573`
4-year	`x_PPP=6574`
5-year	`x_PPP=6575`
QWAC Legal for PSD2
90-day	`x_PPP=1248`
1-year	`x_PPP=6601`
2-year	`x_PPP=6602`
3-year	`x_PPP=6603`
4-year	`x_PPP=6604`
5-year	`x_PPP=6605`
QWAC Legal for PSD2 Multi-Domain
90-day	`x_PPP=4564`
1-year	`x_PPP=6611`
2-year	`x_PPP=6612`
3-year	`x_PPP=6613`
4-year	`x_PPP=6614`
5-year	`x_PPP=6615`
The token-based eIDAS certificate customers must supply the following shipping parameters:
	`shippingStreetAddress1`
	`shippingLocalityName`
	`shippingStateOrProvinceName`
	`shippingPostalCode`
	`shippingCountryName`
	`shippingForename`
	`shippingSurname`
	`shippingEmailAddress`
	`shippingTelephone`
While ordering eToken-based eIDAS certificate you must also specify eToken and eToken shipping. The corresponding codes are indicated below.
eToken
eToken Cost	`x_PPP=495`
Shipping Cost
Standard Shipping	`x_PPP=496`
Expedited Shipping	`x_PPP=497`
International Shipping	`x_PPP=498`

Seal Qualified Certificate

1-year

x_PPP=6541

2-year

x_PPP=6542

3-year

x_PPP=6543

4-year

x_PPP=6544

5-year

x_PPP=6545

Seal Qualified Certificate QSCD

1-year

x_PPP=6551

2-year

x_PPP=6552

3-year

x_PPP=6553

4-year

x_PPP=6554

5-year

x_PPP=6555

Seal for PSD2

1-year

x_PPP=6581

2-year

x_PPP=6582

3-year

x_PPP=6583

4-year

x_PPP=6584

5-year

x_PPP=6585

Seal for PSD2 QSCD

1-year

x_PPP=6591

2-year

x_PPP=6592

3-year

x_PPP=6593

4-year

x_PPP=6594

5-year

x_PPP=6595

QWAC Legal

90-day

x_PPP=1247

1-year

x_PPP=6561

2-year

x_PPP=6562

3-year

x_PPP=6563

4-year

x_PPP=6564

5-year

x_PPP=6565

QWAC Legal Multi-Domain

90-day

x_PPP=4562

1-year

x_PPP=6571

2-year

x_PPP=6572

3-year

x_PPP=6573

4-year

x_PPP=6574

5-year

x_PPP=6575

QWAC Legal for PSD2

90-day

x_PPP=1248

1-year

x_PPP=6601

2-year

x_PPP=6602

3-year

x_PPP=6603

4-year

x_PPP=6604

5-year

x_PPP=6605

QWAC Legal for PSD2 Multi-Domain

90-day

x_PPP=4564

1-year

x_PPP=6611

2-year

x_PPP=6612

3-year

x_PPP=6613

4-year

x_PPP=6614

5-year

x_PPP=6615

The token-based eIDAS certificate customers must supply the following shipping parameters:

shippingStreetAddress1

shippingLocalityName

shippingStateOrProvinceName

shippingPostalCode

shippingCountryName

shippingForename

shippingSurname

shippingEmailAddress

shippingTelephone

While ordering eToken-based eIDAS certificate you must also specify eToken and eToken shipping. The corresponding codes are indicated below.

eToken

eToken Cost

x_PPP=495

Shipping Cost

Standard Shipping

x_PPP=496

Expedited Shipping

x_PPP=497

International Shipping

x_PPP=498

Sample request

curl --location 'https://secure.trust-provider.com/products/!PlaceOrder' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'loginName=login_name' \
--data-urlencode 'loginPassword=login_password' \
--data-urlencode 'reseller=Y' \
--data-urlencode 'ap=reseller_brand_name' \
--data-urlencode 'isReturningCustomer=N' \
--data-urlencode '1_PPP=6581' \
--data-urlencode 'foreName=William' \
--data-urlencode 'Surname=Jones' \
--data-urlencode 'Title=Dr.' \
--data-urlencode '[email protected]' \
--data-urlencode 'organizationName=OrgName 1234567' \
--data-urlencode 'streetAddress1=71 Evans Overpass Apt. 444' \
--data-urlencode 'localityName=Los Angeles' \
--data-urlencode 'stateOrProvinceName=California' \
--data-urlencode 'postalCode=90002' \
--data-urlencode 'countryName=US' \
--data-urlencode '1_csr=-----BEGIN CERTIFICATE REQUEST-----
MIIE6TCCAtECAQAwYTEaMBgGA1UEAwwRcXdlcnR5LnZwcy1xYS5jb20xCzAJBgNV
BAYTAkRFMQ8wDQYDVQQIDAZCZXJsaW4xDzANBgNVBAcMBkJlcmxpbjEUMBIGA1UE
...
XjZfWxUWfKXMEtwrKj4ylMIpN7VX9DUt3QW56TNB6+c1LpIbhOkY0ndgy71RhFer
l3cKv6jEltTVovBq4O/AjOV+vTlgevlNNb5OLexX0pmiRwMjkX7xAHSIO9/EdRs3
THEhI6mJrzOjbWLIZA==
-----END CERTIFICATE REQUEST-----' \
--data-urlencode '[email protected]' \
--data-urlencode 'joiCountryName=US' \
--data-urlencode 'joistateOrProvinceName=California' \
--data-urlencode '1_webserverSoftwareID=-1' \
--data-urlencode '1_organizationIdentifier=PSDHU-CBH-12345ABC' \
--data-urlencode '1_ncaIdentifier=HU-CBH' \
--data-urlencode '1_ncaName=Central Bank of Hungary' \
--data-urlencode '1_semanticsIdentifier=VATBE-0876866142' \
--data-urlencode '1_PAYMENTSERVICEROLE=Y' \
--data-urlencode 'dateofIncorporation=2022-01-30' \
--data-urlencode 'businessCategory=d'

Response

The type of response depends on whether the call was successful and on whether the successURL and errorURL parameters were supplied in the request. successURL and errorURL are intended to be used only when PlaceOrder is called by a browser. When PlaceOrder is called from a back-end server, these parameters are irrelevant.

Unspecified `successURL` or `errorURL`

If the call is successful without successURL or fails without an errorURL, the MIME type of the response will be application/x-www-form-urlencoded, because the format of the response will be the same URL-encoded format as the request. For example, name1=value1&name2=value2.

Specified `successURL` or `errorURL`

If the call is successful and a successURL was supplied, or if an error occurs and an errorURL was supplied, then the browser will be redirected to the successURL or errorURL, whichever is applicable. The preceding parameters listed for unspecified successURL or errorURL will be passed as GET parameters in the 'query string' of the URL. This query string can be parsed by a JavaScript code.

Response parameters

Various parameters may appear in the response:

Parameter Requirement Type Max.Length Description

Parameter	Requirement	Type	Max.Length	Description
`errorCode`	required	integer		A numeric code that identifies the type of error and is always present in the response. For more information, see Error codes.
`orderNumber`	optional	string	128 chars	A newly assigned order number if the order was placed successfully.
`errorMessage`	optional	string	255 chars	The explanation of error if an error occurred.
`errorItem`	optional	string	255 chars	The name of the request parameter that caused the error if applicable.

errorCode

required

integer

A numeric code that identifies the type of error and is always present in the response.

For more information, see Error codes.

orderNumber

optional

string

128 chars

A newly assigned order number if the order was placed successfully.

errorMessage

optional

string

255 chars

The explanation of error if an error occurred.

errorItem

optional

string

255 chars

The name of the request parameter that caused the error if applicable.

Integration example of calling `PlaceOrder` using an HTML

Here is an example of how to order one-year Citizen Qualified eIDAS ecertificate by calling PlaceOrder from an HTML <form>:

<html>
<head>
<title>!PlaceOrder example: Ordering a one-year Citizen Qualified eIDAS certificate</title>
</head>
<body>
<form method=”post” name=”form1” action=”https://secure.trust-provider.com/products/!PlaceOrder”>
<input type=”hidden” name=”ap” value=”myresellerbrand”>
<input type=”hidden” name=”reseller” value=”y”>
<input type=”hidden” name=”errorURL” value=”http://www.mydomain.com/error_page.html”>
<input type=”hidden” name=”successURL” value=”http://www.mydomain.com/success_page.html”>
Email Address: <input type=”text” name=”emailAddress”>
<br>Name: <input type=”text” name=”name”>
<br>Company: <input type=”text” name=”organizationName”>
<input type=”hidden” name=”1_PPP” value=”6501”>
<br>MAC Address: <input type=”text” name=”1_MACAddress”>
<input type=”submit” value=”Place Order”>
</form>
</body>
</html>

Authorizing orders

When an order has been placed successfully with reseller=Y, you will need to authorize it before it is processed by Sectigo. You can authorize an order from within your Reseller account options on the Sectigo Management System, or by using the AutoAuthorize API endpont. Sectigo will deduct funds from your account when you authorize an order unless there is no charge. We recommend that you authorize an order only after you have actually received payment from your customer.

For those products that are free, you may want to avoid having to authorize each order. You can achieve this by using reseller=N when you call PlaceOrder.

Placing orders via ordering URLs

The PlaceOrder has been designed so that it can be integrated 'invisibly' with your own website (no webpages from secure.trust-provider.com need to be displayed to the applicant). However, we recognize that some Resellers will not want to go to the trouble of 'integrating an API' purely to achieve this 'invisibility'.

Those Resellers can resell the same products via their Reseller 'Ordering URLs'. For those products available through this API endpoint that require a loginName and loginPassword, we recommend that only the end-customers should place orders using these Ordering URLs, because only the end-customers should be in possession of their login credentials. For all other products, you the Reseller may use these 'Ordering URLs' to place orders on behalf of your customers.

Integration examples of calling `PlaceOrder` via a URL

An example, expressed as URLs, of how to call PlaceOrder from a browser for an order for a free one-year Seal Qualified Certificate QSCD:

https://secure.trust-provider.com/products/!PlaceOrder?ap=myresellerbrand&reseller=y&[email protected]&name=Fred+Bloggs&1_PPP=6551&loginName=fredbloggs&loginPassword=loginpassword

An example, expressed as URLs, of how to call PlaceOrder from a browser for an order for a Sectigo HackerGuardian Daily Scanning Service licence with recurring monthly payments:

https://secure.trust-provider.com/products/!PlaceOrder?ap=myresellerbrand&reseller=y&[email protected]&1_PPP=3411&loginName=fredbloggs&loginPassword=somethinghardtoguess

Sample success response

orderNumber=1234567

Sample error response

errorCode=-16&errorItem=Incorrect+login+details%2C+account+is+locked%2C+password+has+expired+or+your+source+IP+is+blocked.

Error codes

The following table outlines error responses returned by the PlaceOrder API endpoint for Resellers. Each error response consists of an errorCode and an errorMessage indicating why the request failed.

Error Code Error Message Description

Error Code	Error Message	Description
`-1`	`Request was not made over HTTPS!`	The request must use HTTPS protocol.
`-2`	`'xxxx' is an unrecognized argument!`	The provided argument is not recognized.
`-3`	`The 'xxxx' argument is missing!`	A required argument is missing from the request.
`-4`	`The value of the 'xxxx' argument is invalid!`	The argument value does not meet validation requirements.
`-13`	`The CSR uses an unsupported key size!`	The key size in the CSR is not supported.
`-14`	`An unknown error occurred!`	An unknown error occurred.
`-16`	`Incorrect login details, account is locked, password has expired or your source IP is blocked.`	Authentication has failed due to one of the specified reasons. Verify your login credentials or check account restrictions.
`-38`	`Certain details that must be validated for 'errorItem' are missing from this Account!`	Certain required details for validation are missing from the account.
`-39`	`At least 1 item is missing from this order!`	The order does not contain all items.
`-44`	`Not a white-listed public key!`	The provided public key is not on the whitelist.
`-45`	`This offer is limited to one free license per account!`	The offer allows only one free license per account.
`-54`	`The order can have one main license only!`	The order is limited to one main license.
`-56`	`Your current license expires on YYYY-MM-DD. Licenses can only be renewed up to 30 days prior to the expiry of your existing license.`	The current license is not eligible for renewal at this time.
`-58`	`Additional IP Addresses pack is not available for trial licence!`	The additional IP address pack cannot be requested for a trial license.
`-60`	`To renew your access to the PCI portal you must purchase enough IP Addresses to support those currently setup. Previously you have purchased XXXX IP addresses.`	To renew access to the PCI portal, you must purchase enough IP addresses to cover the existing setup.
`-61`	`The number of IP addresses does not match the specified product.`	The number of IP addresses provided does not correspond to the selected product.
`-62`	`Company name is required but missing.`	The required company name is missing.
`-65`	`PlanID for this product not found.`	The specified PlanID for the product could not be found.
`-70`	`Invalid Email Address!`	The provided email address is not valid.
`-83`	`'xxxx' is not applicable to this order!`	The specified argument is not applicable for the current order.
`-91`	`Permission Denied. 'xxx'`	The user does not have permission for the specified context.
`-97`	`Session is expired`	The session has expired.
`-126`	`HTTP(S) CSR Hash DCV Methods are not allowed to validate Wildcard Domain!`	The HTTP(S) CSR Hash DCV methods cannot be used to validate a wildcard domain.
`-128`	`You can not buy the addon.`	You are not permitted to purchase the specified addon.

-1

Request was not made over HTTPS!

The request must use HTTPS protocol.

-2

'xxxx' is an unrecognized argument!

The provided argument is not recognized.

-3

The 'xxxx' argument is missing!

A required argument is missing from the request.

-4

The value of the 'xxxx' argument is invalid!

The argument value does not meet validation requirements.

-13

The CSR uses an unsupported key size!

The key size in the CSR is not supported.

-14

An unknown error occurred!

An unknown error occurred.

-16

Incorrect login details, account is locked, password has expired or your source IP is blocked.

Authentication has failed due to one of the specified reasons.

Verify your login credentials or check account restrictions.

-38

Certain details that must be validated for 'errorItem' are missing from this Account!

Certain required details for validation are missing from the account.

-39

At least 1 item is missing from this order!

The order does not contain all items.

-44

Not a white-listed public key!

The provided public key is not on the whitelist.

-45

This offer is limited to one free license per account!

The offer allows only one free license per account.

-54

The order can have one main license only!

The order is limited to one main license.

-56

Your current license expires on YYYY-MM-DD. Licenses can only be renewed up to 30 days prior to the expiry of your existing license.

The current license is not eligible for renewal at this time.

-58

Additional IP Addresses pack is not available for trial licence!

The additional IP address pack cannot be requested for a trial license.

-60

To renew your access to the PCI portal you must purchase enough IP Addresses to support those currently setup. Previously you have purchased XXXX IP addresses.

To renew access to the PCI portal, you must purchase enough IP addresses to cover the existing setup.

-61

The number of IP addresses does not match the specified product.

The number of IP addresses provided does not correspond to the selected product.

-62

Company name is required but missing.

The required company name is missing.

-65

PlanID for this product not found.

The specified PlanID for the product could not be found.

-70

Invalid Email Address!

The provided email address is not valid.

-83

'xxxx' is not applicable to this order!

The specified argument is not applicable for the current order.

-91

Permission Denied. 'xxx'

The user does not have permission for the specified context.

-97

Session is expired

The session has expired.

-126

HTTP(S) CSR Hash DCV Methods are not allowed to validate Wildcard Domain!

The HTTP(S) CSR Hash DCV methods cannot be used to validate a wildcard domain.

-128

You can not buy the addon.

You are not permitted to purchase the specified addon.

eIDAS certificate

Request parameters

Product-specific parameters

eIDAS Natural Persons certificate parameters

eIDAS Legal Persons certificate parameters

Sample request

Response

Unspecified successURL or errorURL

Specified successURL or errorURL

Response parameters

Integration example of calling PlaceOrder using an HTML

Authorizing orders

Placing orders via ordering URLs

Integration examples of calling PlaceOrder via a URL

Sample success response

Sample error response

Error codes

Unspecified `successURL` or `errorURL`

Specified `successURL` or `errorURL`

Integration example of calling `PlaceOrder` using an HTML

Integration examples of calling `PlaceOrder` via a URL