---
title: "List certificates"
method: GET
path: "/v2/domains/{domain}/certificates"
tags: ["domains"]
---

# List certificates

`GET /v2/domains/{domain}/certificates`

Returns the current certificate set plus the latest provisioning attempt's status. Clients poll this endpoint to observe progress of an in-flight provisioning request. Accepts the domain id or name.

## Path parameters

- `domain` string, required

## Response `200`

OK

- object
  - `certificates` DomainCertificate[], required
    - `id` string, required — Certificate identifier
    - `kind` 'automatic' | 'manual', required — `automatic` for ACME-provisioned certificates, `manual` for user-uploaded ones
    - `subject_alt_names` string[], required — All hostnames covered by this certificate
    - `private_key_algorithm` 'ec-p256' | 'ec-p384' | 'ec-p521' | 'rsa-2048' | 'rsa-3072' | 'rsa-4096', required — Private key algorithm
    - `not_valid_before` string, required — ISO 8601 start of validity window
    - `not_valid_after` string, required — ISO 8601 end of validity window
    - `created_at` string, required — ISO 8601 timestamp of when the certificate was stored
  - `provisioning_status` ProvisioningStatus, required
    - `code` 'success' | 'failed' | 'pending' | 'manual', required — Aggregate state of the most recent TLS provisioning attempt.
    - `message` string — Non-internal error detail when `code` is `failed`

---

[API](https://skmtc.net/deno/apis/deploy.md) · [All operations](https://skmtc.net/deno/apis/deploy/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/deno/deploy/versions/5a56038d108e/schema)