Delete Domain Certificate
Remove a previously-issued cert from the platform's cache. Cannot be undone — the cert's PEM bytes are deleted from the database. The original X.509 cert is still in the public CT logs (that's the point of CT) but the platform won't serve it again.
If the cert is currently active, the next TLS handshake on the domain triggers a fresh ACME issuance — clients connecting in that window may see a delay or a fallback cert. Avoid deleting the active cert unless you've already switched to another via PUT /v1/active-cert.
Path parameters
uuid string (uuid) Req
Domain UUID.
cert_uuid string (uuid) Req
Certificate UUID. Get from /certificates.
Response (204 No Content)
Empty body on success.
Errors
401 Unauthorized
Missing auth.
404 Not Found
Domain or cert doesn't exist (or doesn't belong to the calling user).
409 Conflict
Cert is currently active. Switch to another cert first via PUT /v1/active-cert, or wait for a fresh issuance.
Request
curl -X DELETE "https://api.ngris.com/v1/domains/self/<uuid>/certificates/<cert_uuid>" \
-H "X-API-KEY: <your_api_key>"
Python
from ngris import Ngris
client = Ngris(api_key="<your_api_key>")
client._client._delete_void(
"/domains/self/<domain_uuid>/certificates/<cert_uuid>"
)
Response — 204 No Content