Create SSL certificate

POST

/certificates

Last modified:2026-10-30 21:14:35

OperationId:CreateSSLCertificateCertmanager

Requests a Let's Encrypt certificate for a hostname, which the certificate manager orders, proves, installs, and renews before it expires. Requires Super User or Reseller scope; a Reseller creates certificates for its own territory only. Run GET /certificates/validate first: a hostname that does not point at this cluster is accepted here, then fails its challenge minutes later.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/json

Examples

Responses

🟢202Accepted

application/json

The request is accepted and applied shortly after. Follow progress in status on GET /certificates/{name}.

Bodyapplication/json

🟠400Bad Request

🟠401Authentication Required

🟠403Forbidden

🟠409Conflict

🔴502Bad Gateway

Request Example

Shell

JavaScript

Java

Swift

cURL

Certificate with alternative namesWildcard alternative name

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/certificates' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data-raw '{
    "common-name": "portal.example.com",
    "subject-alternative-name": "phone.example.com,admin.example.com",
    "account-email-address": "admin@example.com",
    "challenge-type": "http-01",
    "replicate-ssl-cert": "yes"
}'

Response Example

202 - Accepted

{
    "code": 202,
    "message": "Accepted"
}

Modified at 2026-10-30 21:14:35

Read SSL certificate

Update SSL certificate