List Domain Certificates
List every certificate ever issued for a domain — the active one plus historical issuances kept for audit, rollback, and pinning purposes. Each issuance is a separate row; renewals create new entries rather than mutating in place, so you can correlate cert serial numbers in your CT logs with platform issuance history.
Distinct from /certificates/self, which lists certs you uploaded. This endpoint shows certs the platform issued via ACME for this specific domain.
Path parameters
uuid string (uuid) Req
Domain UUID.
Response (200 OK)
items array
Certificates ordered by
issued_at DESC (newest first).items[].id int64
Numeric ID. Used in PUT /v1/active-cert and DELETE /v1/certificates/{cert_id}.
items[].uuid string
Stable UUID for cross-API references.
items[].serial string
Cert serial number (hex). Pair with CT log lookup tools.
items[].subject_cn string
Subject Common Name (typically the apex domain).
items[].sans string[]
Subject Alternative Names — every domain/subdomain the cert covers.
items[].issuer_cn string
Issuer CN, e.g.
"Let's Encrypt R3".items[].issued_at, expires_at datetime
Issuance and expiry. RFC 3339 UTC.
items[].active boolean
Whether this cert is currently being served. Exactly one cert per domain has
active: true at any time.items[].fingerprint_sha256 string
SHA-256 fingerprint of the DER-encoded cert. Useful for HPKP/cert-pinning configurations.
Errors
401 Unauthorized
Missing auth.
404 Not Found
Domain doesn't exist or doesn't belong to the calling user.
Request
curl "https://api.ngris.com/v1/domains/self/<uuid>/certificates" \
-H "X-API-KEY: <your_api_key>"
Python
from ngris import Ngris
client = Ngris(api_key="<your_api_key>")
certs = client._get_raw("/domains/self/<domain_uuid>/certificates")
for c in certs["items"]:
badge = "ACTIVE" if c["active"] else ""
print(f"{c['serial'][:16]}... {c['issued_at']} {badge}")
Response — 200 OK
{
"items": [
{
"id": 7,
"uuid": "abc-...",
"serial": "04ce8901e3...",
"subject_cn": "example.com",
"sans": ["example.com", "*.example.com"],
"issuer_cn": "Let's Encrypt R3",
"issued_at": "2026-04-15T08:23:00Z",
"expires_at": "2026-07-14T08:23:00Z",
"active": true,
"fingerprint_sha256": "AB:CD:EF:..."
}
]
}