Skip to content
Start here

Origin CA Certificates

List Certificates
client.originCACertificates.list(OriginCACertificateListParams { zone_id, page, per_page } query, RequestOptionsoptions?): V4PagePaginationArray<OriginCACertificate { id, certificate, csr, 5 more } >
GET/certificates
Get Certificate
client.originCACertificates.get(stringcertificateID, RequestOptionsoptions?): OriginCACertificate { id, certificate, csr, 5 more }
GET/certificates/{certificate_id}
Create Certificate
client.originCACertificates.create(OriginCACertificateCreateParams { csr, hostnames, request_type, 2 more } body, RequestOptionsoptions?): OriginCACertificate { id, certificate, csr, 5 more }
POST/certificates
Revoke Certificate
client.originCACertificates.delete(stringcertificateID, RequestOptionsoptions?): OriginCACertificateDeleteResponse { id, revoked_at }
DELETE/certificates/{certificate_id}
ModelsExpand Collapse
OriginCACertificate { id, certificate, csr, 5 more }
id?: string

The x509 serial number of the Origin CA certificate.

certificate?: string

The Origin CA certificate. Will be newline-encoded.

csr?: string

The Certificate Signing Request (CSR). Must be newline-encoded.

expires_on?: string

When the certificate will expire.

hostnames?: Array<string>

Array of hostnames or wildcard names bound to the certificate. Hostnames must be fully qualified domain names (FQDNs) belonging to zones on your account (e.g., example.com or sub.example.com). Wildcards are supported only as a *. prefix for a single level (e.g., *.example.com). Double wildcards (*.*.example.com) and interior wildcards (foo.*.example.com) are not allowed. The wildcard suffix must be a multi-label domain (*.example.com is valid, but *.com is not). Unicode/IDN hostnames are accepted and automatically converted to punycode.

request_type?: CertificateRequestType

Signature type desired on certificate (“origin-rsa” (rsa), “origin-ecc” (ecdsa), or “keyless-certificate” (for Keyless SSL servers).

requested_validity?: 7 | 30 | 90 | 4 more

The number of days for which the certificate was requested to be valid. Only returned in the Create Certificate response, where it echoes the requested value. Not returned when getting or listing certificates.

One of the following:
7
30
90
365
730
1095
5475
revoked_at?: string

When the certificate was revoked.

formatdate-time
OriginCACertificateDeleteResponse { id, revoked_at }
id?: string

The x509 serial number of the Origin CA certificate.

revoked_at?: string

When the certificate was revoked.

formatdate-time