Skip to main content
Some links point to the service guide, which is currently available in Korean only.
For a platform to issue tax invoices on a supplier’s behalf (delegated issuance, simple-approval reverse issuance), you must first register the supplier’s certificate. Certificate registration is a process in which the supplier selects a certificate and enters its password directly on the web, so you send the supplier to the issued URL and have them return to the platform once registration is complete. The location they return to is the certificate registration completion redirect URL.

​
Prerequisite: Set the redirect URL

The redirect URL is configured per API key. If you do not specify one, the default https://bolta.io/openapi-certificate-redirect is used, and you can change it to the address you want on the API key edit screen in the Developer Center. For detailed configuration steps, see API Keys and Connecting a webhook.

​
Registration flow

Issue a certificate registration URL

Call the Retrieve Certificate Registration URL API to issue the URL where the supplier will register their certificate. The issued URL is valid for 5 minutes.

Supplier registers the certificate

The supplier visits the issued URL, selects their certificate, and enters its password. This step is performed by the supplier directly.

Redirect return

Once registration is complete, the supplier’s browser navigates to the redirect URL set on the API key.

Check the registration result

Call the Retrieve Certificate Registration Status API and use the response’s latestHistory.code and latestHistory.message to determine whether registration succeeded. This record can only be retrieved within 30 seconds after registration, so call it right after the redirect returns.
The redirect is only a browser navigation, so whether registration actually succeeded is determined by the result code from the Retrieve Certificate Registration Status API. If the response has a latestHistory, use latestHistory.code and latestHistory.message to check for success; if latestHistory is null, treat it as a state with no retrievable registration record.

​
Registration result codes

These are the latestHistory.code and latestHistory.message values from the Retrieve Certificate Registration Status API response.

​
Notes

  • The certificate registration URL expires 5 minutes after it is issued. Once it expires, you must issue a new one.
  • The certificate registration record can only be retrieved for 30 seconds after registration. Retrieve it right after the redirect returns.
  • We recommend setting the redirect URL to an HTTPS endpoint that you operate yourself.