Skip to content
Start here

Origin CA Certificates

List Certificates
client.originCACertificates.list(OriginCACertificateListParams { zone_id, limit, offset, 2 more } query, RequestOptionsoptions?): V4PagePaginationArray<OriginCACertificate { csr, hostnames, request_type, 4 more } >
GET/certificates
Get Certificate
client.originCACertificates.get(stringcertificateId, RequestOptionsoptions?): OriginCACertificate { csr, hostnames, request_type, 4 more }
GET/certificates/{certificate_id}
Create Certificate
client.originCACertificates.create(OriginCACertificateCreateParams { csr, hostnames, request_type, requested_validity } body, RequestOptionsoptions?): OriginCACertificate { csr, hostnames, request_type, 4 more }
POST/certificates
Revoke Certificate
client.originCACertificates.delete(stringcertificateId, RequestOptionsoptions?): OriginCACertificateDeleteResponse { id, revoked_at }
DELETE/certificates/{certificate_id}
ModelsExpand Collapse
OriginCACertificate { csr, hostnames, request_type, 4 more }
csr: string

The Certificate Signing Request (CSR). Must be newline-encoded.

hostnames: Array<string>

Array of hostnames or wildcard names bound to the certificate. Hostnames must be fully qualified domain names (FQDNs) belonging to zones on your account (e.g., example.com or sub.example.com). Wildcards are supported only as a *. prefix for a single level (e.g., *.example.com). Double wildcards (*.*.example.com) and interior wildcards (foo.*.example.com) are not allowed. The wildcard suffix must be a multi-label domain (*.example.com is valid, but *.com is not). Unicode/IDN hostnames are accepted and automatically converted to punycode.

Signature type desired on certificate ("origin-rsa" (rsa), "origin-ecc" (ecdsa), or "keyless-certificate" (for Keyless SSL servers).

requested_validity: RequestValidity

The number of days for which the certificate should be valid.

id?: string

Identifier.

maxLength32
certificate?: string

The Origin CA certificate. Will be newline-encoded.

expires_on?: string

When the certificate will expire.

OriginCACertificateDeleteResponse { id, revoked_at }
id?: string

Identifier.

maxLength32
revoked_at?: string

When the certificate was revoked.

formatdate-time