List Certificates

List My Certificates

GET /v1/certificates/self

List TLS certificates the calling user has uploaded for use on custom-domain endpoints. These are user-supplied certs (perhaps issued by a corporate CA, EV certs, or wildcards from another provider) — distinct from the platform-managed ACME certs returned by /domains/self/{id}/certificates.

Account scope: these are the certificates of your active account, shared with its members per your role's permissions. Use switch account to work with a different account's certificates.

Private keys are not returned anywhere — once uploaded, they're write-only and stored encrypted at rest. To rotate a key, delete the cert and upload a new one.

Custom certificates require the custom_ssl entitlement on your plan. Without it, this endpoint returns an empty list (uploads are rejected separately).

Response (200 OK)

JSON array of certificate objects:

id int64

Numeric ID. Use to attach via PUT /v1/endpoints/{id}/certificate.

uuid string

Stable UUID (used in download/delete URLs).

name string

Friendly label you supplied at upload.

subject_cn string

Subject Common Name from the cert.

sans string[]

Subject Alternative Names — every host the cert can be served for.

issuer_cn string

Issuing CA's CN.

not_before, not_after datetime

Validity window. Endpoints don't serve expired certs — they fall back to ACME.

is_active boolean

true if the cert is currently usable. Becomes false after expiry or admin revocation.

created_at datetime

When you uploaded it.

Errors

401 Unauthorized

Missing auth.

Request
curl "https://api.ngris.com/v1/certificates/self" \
  -H "X-API-KEY: <your_api_key>"

Python
from ngris import Ngris

client = Ngris(api_key="<your_api_key>")
for c in client.certificates.list():
    print(f"#{c.id} {c.name} expires {c.not_after}")

Response — 200 OK
[
  {
    "id": 7,
    "uuid": "abc-123",
    "name": "wildcard.example.com",
    "subject_cn": "*.example.com",
    "sans": ["example.com", "*.example.com"],
    "issuer_cn": "DigiCert TLS Hybrid ECC SHA384 2020 CA1",
    "not_before": "2026-01-01T00:00:00Z",
    "not_after": "2027-01-01T00:00:00Z",
    "is_active": true,
    "created_at": "2026-01-01T12:00:00Z"
  }
]

PreviousDelete Domain Certificate NextUpload Certificate

On this page

List My Certificates