v1

latestOpenAPI 3.1.12026-08-063445179.6 KB

domains

Upload a TLS certificate

Upload a PEM-encoded certificate and private key. The server validates that the certificate covers the domain and that the key algorithm is RSA-2048 or EC P-256. Accepts the domain id or name.

post/v2/domains/{domain}/certificates

Path parameters

domainstring required

The domain ID or name (e.g. example.com). Domain IDs are UUIDs.

Request body

certificatestring required

PEM-encoded certificate (full chain)

private_keystring required

PEM-encoded private key matching the certificate

Response

idstring required

Unique domain identifier (UUID)

organization_idstring required

Organization that owns the domain

domainstring required

The bare hostname (e.g. shop.acme.com). Wildcard coverage is reported via kind, never as a *. literal in this field.

kind'base_only' | 'wildcard_only' | 'base_and_wildcard' required

Whether the domain covers the apex, a wildcard, or both

verification_tokenstring required

Token to publish under _acme-challenge.<domain> for ownership verification

is_validatedboolean required

True once DNS-based ownership has been confirmed

created_atstring required

ISO 8601 timestamp of creation

updated_atstring required

ISO 8601 timestamp of last modification