Create SSL certificate

POST

/certificates

Last modified:2026-10-03 15:14:51

OperationId:CreateSSLCertificateCertmanager

Requests a Let's Encrypt certificate for a hostname. The certificate manager places the order, proves control of each name with the chosen challenge, installs the certificate, and renews it before it expires.

Requires Super User or Reseller scope. A Reseller creates certificates for its own territory only: reseller is set to the token's territory, and default-ssl-cert can't be yes. A Super User who leaves out reseller creates a system-level certificate, owned by *.

Send common-name and account-email-address. Put wildcards in subject-alternative-name, never in common-name, and use challenge-type dns-01 with them. Run GET /certificates/validate first: a hostname that does not point at this cluster is accepted here, then fails its challenge minutes later.

A 202 means the request is accepted and applied shortly after. Follow progress in status on GET /certificates/{name}. A common name that already exists returns 409, whoever owns it.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/json

Examples

Responses

🟢202Accepted

application/json

The request is accepted and applied shortly after.

Bodyapplication/json

🟠400Bad Request

🟠401Authentication Required

🟠403Forbidden

🟠409Conflict

🔴502Bad Gateway

Request Example

Shell

JavaScript

Java

Swift

cURL

Certificate with alternative namesWildcard alternative name

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/certificates' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data-raw '{
    "common-name": "portal.example.com",
    "subject-alternative-name": "phone.example.com,admin.example.com",
    "account-email-address": "admin@example.com",
    "challenge-type": "http-01",
    "replicate-ssl-cert": "yes"
}'

Response Example

202 - Accepted

{
    "code": 202,
    "message": "Accepted"
}

Modified at 2026-10-03 15:14:51

Read SSL certificate

Update SSL certificate