TBS INTERNET API
The TBS INTERNET API allows you to automate various operations related to your certificates such as ordering, checking the status or renewing your your certificates. The TBS INTERNET API is based on XML-RPC.
Various examples using PHP, with the library phpxmlrpc 3 are provided.
A full API reference is also available and will be referred to multiple times in this documentation.
Listing operations
A second API, in REST mode, is available to list your pending orders and currently valid certificates: consult the documentation.
Mailing list
A mailing list is available to receive information about the development of the API and updates to its documentation. To subscribe, just send an email to the following address tag-apitbsfr-subscribe@mxa.clust1.tbs-internet.net.
How to proceed?
First of all, it is necessary to test the different functionalities of the API. You can do it with our SANDBOX. You will have to create an account on our SANDBOX and then create an API user. Here are the steps to follow:
- Go on this page
- Fill in the various fields and click on "Create account".
- The account must be activated manually by our team. Wait until you receive the activation confirmation email.
- Once the account is activated, go to this page to connect.
- In the left panel, "Administration" section, click on "Users".
- Click on "Add API user" and choose the username and password.
Once the API user is created, fill in the username and password chosen in your script/software/code.
Then, once you are ready to go into production, you must proceed in exactly the same way by connecting to your public account (French).
Connection information
The requests have to be sent to those servers:
| IPv6 | IPv4 | Automatic IP detection | |
|---|---|---|---|
| PRODUCTION | publicapi6.tbs-certificats.com
port: 443 |
publicapi4.tbs-certificats.com
port: 443 |
publicapi.tbs-certificats.com
port: 443 |
| SANDBOX | apisandbox6.or2.clust2.tbs-internet.net
port: 443 |
apisandbox4.or2.clust2.tbs-internet.net
port: 443 |
apisandbox.or2.clust2.tbs-internet.net
port: 443 |
List of products available via the API
| Product code | Product name | Lifetime | License | SAN | Wildcard SAN | Domain SAN |
|---|---|---|---|---|---|---|
| ssl | Thawte SSL Standard | 1-2-3 | - | - | ||
| sslev | Thawte SSL EV | 1-2-3 | - | - | - | |
| wssl | Thawte SSL Wildcard | 1-2-3 | - | - | - | - |
| PSbasic | Basic DV | 1-2-3-4-5 | - | - | - | - |
| PSbasicMulti | Basic DV Multiple Sites (3+) | 1-2-3-4-5 | - | - | ||
| PSbasictest | Basic DV test | 30d | - | - | - | - |
| PSbasicW | Basic DV Web | 1-2-3-4-5 | - | - | - | - |
| PSbasicwild | Basic DV Wildcard | 1-2-3-4-5 | - | - | - | - |
| PSbasicWtest | Basic DV Web test | 30d | - | - | - | - |
| PSfreeW90 | Free DV Web | 90d | - | - | - | - |
| X509s2m100dom | TBS X509 100 Multiple Sites | 1-2 | - | - | - | |
| X509s2m12dom | TBS X509 12 Multiple Sites | 1-2 | - | - | - | |
| X509s2m40dom | TBS X509 40 Multiple Sites | 1-2 | - | - | - | |
| X509s2wild | TBS X509 Omnidomain | 1-2 | - | - | - | |
| X509SHA256e | TBS X509 Ecommerce | 1-2 | - | - | - | - |
| X509SHA256p | TBS X509 Premium | 1-2 | - | - | - | - |
| X509SHA256s | TBS X509 Standard | 1-2 | - | - | - | - |
| digivmc | DigiCert VMC | 1-2-3 | - | - | - | |
| global | DigiCert SSL Secure Site Pro | 1-2-3 | - | - | ||
| globalev | DigiCert Secure Site Pro EV | 1-2-3 | - | - | - | |
| secure | DigiCert SSL secure | 1-2-3 | - | - | ||
| secureev | DigiCert Secure Site EV | 1-2-3 | - | - | - | |
| HAaseal | Harica Advanced Seal | 1-2 | - | - | - | - |
| HAasealpsd | Harica Advanced Seal PSD2 | 1-2 | - | - | - | - |
| HAqseal | Harica Qualified Seal on token | 1-2 | - | - | - | - |
| HAqsealHSM | Harica Qualified Seal on distant HSM | 1-2 | - | - | - | - |
| HAqsealpsd | Harica PSD2 Qualified Seal | 1-2 | - | - | - | - |
| HAqwac | Harica QWAC | 1-2 | - | - | - | - |
| HAqwacpsd | Harica QWAC-PSD2 | 1-2 | - | - | - | - |
| HAsealpsdtest | Harica Seal test PSD2 | 1 | - | - | - | - |
| HAwacpsdtest | Harica test WAC PSD2 | 1 | - | - | - | - |
| rapidssl | Geotrust RapidSSL | 1-2-3 | - | - | - | - |
| rapidsslw | Geotrust RapidSSL Wildcard | 1-2-3 | - | - | - | - |
| tbidev | GeoTrust True BusinessID with EV | 1-2-3 | - | - | - | |
| tbidevm | GeoTrust True BusinessID with EV Multi 5+ | 1-2-3 | - | - | - | |
| tbizwild | Geotrust True BusinessID Wildcard | 1-2-3 | - | - | - | - |
| truebiz | Geotrust True BusinessID | 1-2-3 | - | - | - | - |
| truebizm | Geotrust True BusinessID Multi 5+ | 1-2-3 | - | - | ||
| COM12s2ucc | Sectigo UCC (12+) | 1-2-3-4-5 | - | - | ||
| COM2wild | Sectigo MultiWild (2+) | 1-2-3-4-5 | - | - | ||
| COM3s2ucc | Sectigo UCC (3+) | 1-2-3-4-5 | - | - | ||
| COMqwac | Sectigo Certificate QWAC for 1 Legal Person | 1-2-3 | - | - | - | - |
| COMqwac3+ | Sectigo Certificate QWAC 3+ for 1 Legal Person | 1-2-3 | - | - | - | |
| COMs2ssl | Sectigo SSL | 1-2-3-4-5 | - | - | - | - |
| COMs2wild | Sectigo WildSSL | 1-2-3-4-5 | - | - | - | - |
| COMvpro | Sectigo Intel vPro | 1-2 | - | - | - | - |
| globdomssl | GlobalSign DomainSSL | 1 | - | - | ||
| globextssl | GlobalSign ExtendedSSL | 1 | - | - | - | |
| globorgssl | GlobalSign OrganizationSSL | 1 | - | - | - | |
| globovwssl | GlobalSign OrganizationSSL Wildcard | 1 | - | - | - | - |
| globucc3ssl | GlobalSign UCC 3+ | 1 | - | - | - |
Toolkit
We provide you with a toolkit to quickly test the API.
This tool offers you a form to fill out to obtain the raw XML expected by the server using the “Show only the sent XML structure” option.
It is possible to make real calls to the sandbox environment to test queries and to load pre-populated JSON profiles to avoid manual data entry.
Use
- Select the server: development environment, test, IPv4, IPv6...
- Fill out the form:
- fill in the required fields in the interface
- or load a profile: select a JSON profile to automatically pre-fill the form
- Choose the method to use: purchase, renewal, reissuance...
- View XML: By selecting “Show only the sent XML structure”, view the raw XML expected by the server