Update SSL certificate

PUT

/certificates/{name}

Last modified:2026-10-03 15:14:59

OperationId:UpdateSSLCertificateCertmanager

Changes a certificate's alternative names, contact email, challenge type, or owner, or forces it to renew. Send only the fields you want to change. The common name can't be changed.

Requires Super User or Reseller scope. A Reseller can change only certificates its territory owns, and can't set default-ssl-cert to yes or reseller to *.

To renew now, send expiration-datetime as 0. status and generate-datetime are set by the certificate manager and are ignored if you send them.

A wildcard in subject-alternative-name requires challenge-type dns-01, checked against the certificate as it will be after the change. A certificate that already has a wildcard with http-01 accepts no other change until you send dns-01 or remove the wildcard.

A 202 means the change is accepted and applied shortly after.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Path Params

Body Params application/json

Examples

Responses

🟢202Accepted

application/json

The request is accepted and applied shortly after.

Bodyapplication/json

🟠400Bad Request

🟠401Authentication Required

🟠403Forbidden

🟠404Record not found

🟠409Conflict

🔴502Bad Gateway

Request Example

Shell

JavaScript

Java

Swift

cURL

Change alternative namesRenew nowAdd wildcard

curl --location --request PUT 'https://awqacore01.crexendocloud.com/ns-api/v2/certificates/portal.example.com' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data-raw '{
    "subject-alternative-name": "phone.example.com,admin.example.com,sip.example.com",
    "account-email-address": "admin@example.com"
}'

Response Example

202 - Accepted

{
    "code": 202,
    "message": "Accepted"
}

Modified at 2026-10-03 15:14:59

Create SSL certificate

Delete SSL certificate