Validate certificate hostnames

GET

/certificates/validate

Last modified:2026-10-30 21:14:41

OperationId:ValidateSSLCertificateHostname

Checks whether each hostname can take a new certificate and points at this cluster, without writing anything. Run it before POST /certificates, which accepts a hostname that points elsewhere and then fails its challenge minutes later. Requires Super User, Super User Read Only, or Reseller scope.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Query Params

Responses

🟢200OK

application/json

One row per requested hostname, in request order. Every verdict is a 200, so one bad alternative name does not cost you the verdicts on the others. Each name is checked in order for availability, as an Endpoints server with replicate=ndp, in DNS, and for cluster membership against the certificate manager's allowlist of this cluster's servers.

Bodyapplication/json

🟠400Bad Request

🟠401Authentication Required

🟠403Forbidden

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/certificates/validate?hostname=portal.example.com%2Cphone.example.com&replicate=yes' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Mixed results

[
    {
        "hostname": "portal.example.com",
        "available": "yes",
        "resolves": "yes",
        "cname": "lb1.example.com",
        "ip-address": "192.0.2.10",
        "ip-addresses": [
            "192.0.2.10"
        ],
        "in-cluster": "yes",
        "message": "DNS validated. portal.example.com points to lb1.example.com."
    },
    {
        "hostname": "phone.example.com",
        "available": "yes",
        "resolves": "no",
        "message": "Unable to resolve your Common Name to a DNS record. Your Common Name should match a DNS CNAME record pointing to a server or load balancer in your cluster."
    },
    {
        "hostname": "*.example.com",
        "available": "no",
        "resolves": "not-applicable",
        "conflicts-with": "*.example.com",
        "conflict-reason": "Common Name already exists.",
        "message": "Common Name already exists."
    }
]

Modified at 2026-10-30 21:14:41

Count SSL certificates

List cluster servers