List My Certificates
List the TLS certificates of your account's domains, newest first: the certificates you uploaded and the ones ngris issued through ACME (acme_issued: true). To list one domain's certificates, use GET /v1/domains/self/{uuid}/certificates.
Account scope: these are the certificates of your active account, shared with its members per your role's permissions. Use switch account to work with a different account's certificates.
The list carries no PEM data. Download returns a certificate with its private key.
Requires the custom_ssl entitlement on your plan.
Query parameters
1.15, max 200.name or domain name contains this text.active, expiring or expired: keeps certificates with that status (below).Response (200 OK)
A JSON object {"items": [...], "total", "page", "page_size"}. total counts every certificate that matches the filters. Each item:
certificate_uuid to attach it via PUT /v1/endpoints/{uuid}/certificate.LE cert for <domain>.null when it has none or can't be parsed.DigiCert Inc), else its Common Name, else Unknown.0001-01-01T00:00:00Z when the date isn't recorded.active, expiring (expires within 30 days) or expired, from not_after.true for the certificate served for its domain (one per domain). Change it with PUT /v1/domains/self/{uuid}/active-cert.true for a certificate ngris issued through ACME, false for one you uploaded.true when the certificate is paused because the account is over its plan's custom-certificate limit: it is kept but not served.quota_paused is true.Deprecated: until the sunset each item also carries the legacy integer id and domain_id fields (domain_id is null when the certificate belongs to no domain). Don't use them; read uuid and domain_uuid.
Errors
status is not active, expiring or expired, or the page is past the first 100,000 certificates.custom_ssl entitlement ("code": "entitlement_required").