For the latest version, please use Certificate Lifecycle Manager 5.2.0! Required API Permissions (No permissions required)