Skip to content
Start here

Origin CA Certificates

List Certificates
GET/certificates
Get Certificate
GET/certificates/{certificate_id}
Create Certificate
POST/certificates
Revoke Certificate
DELETE/certificates/{certificate_id}
ModelsExpand Collapse
OriginCACertificate object { id, certificate, csr, 5 more }
id: optional string

The x509 serial number of the Origin CA certificate.

certificate: optional string

The Origin CA certificate. Will be newline-encoded.

csr: optional string

The Certificate Signing Request (CSR). Must be newline-encoded.

expires_on: optional string

When the certificate will expire.

hostnames: optional array of string

Array of hostnames or wildcard names bound to the certificate. Hostnames must be fully qualified domain names (FQDNs) belonging to zones on your account (e.g., example.com or sub.example.com). Wildcards are supported only as a *. prefix for a single level (e.g., *.example.com). Double wildcards (*.*.example.com) and interior wildcards (foo.*.example.com) are not allowed. The wildcard suffix must be a multi-label domain (*.example.com is valid, but *.com is not). Unicode/IDN hostnames are accepted and automatically converted to punycode.

request_type: optional CertificateRequestType

Signature type desired on certificate (“origin-rsa” (rsa), “origin-ecc” (ecdsa), or “keyless-certificate” (for Keyless SSL servers).

requested_validity: optional 7 or 30 or 90 or 4 more

The number of days for which the certificate was requested to be valid. Only returned in the Create Certificate response, where it echoes the requested value. Not returned when getting or listing certificates.

One of the following:
7
30
90
365
730
1095
5475
revoked_at: optional string

When the certificate was revoked.

formatdate-time
OriginCACertificateDeleteResponse object { id, revoked_at }
id: optional string

The x509 serial number of the Origin CA certificate.

revoked_at: optional string

When the certificate was revoked.

formatdate-time