Add a SAN to a certificate

POST

/api/organizations/{organizationId}/certificates/{certificateId}/sans

Registers a new Subject Alternative Name on the certificate. The name is lower-cased and validated: it must be a valid ASCII/punycode DNS host name (max 253 characters), may be a wildcard (e.g. "*.example.com"), must belong to the certificate's domain, must be unique within the certificate, and must not be redundant with an existing entry. A DNS recheck is scheduled immediately after creation, so the SAN starts with dnsStatus "unknown".

Authorizations

ApiToken

Long-lived API token created via POST /api/api-tokens (returned once in plaintext). A token created with readOnly may only perform safe requests (GET, HEAD, OPTIONS); write requests are rejected on every endpoint.

Type

API Key (header: X-API-TOKEN)

or

JWT

JWT access token obtained via POST /api/auth/login. Send as: Authorization: Bearer .

Type

HTTP (bearer)

Parameters

Path Parameters

organizationId*

Organization identifier

Type

string

Required

certificateId*

Certificate identifier

Type

string

Required

Request Body

{

  

"name": "www.example.com"

}

Responses

certificate-san resource created

Content-Type

{

  

"@context": "string",

  

"@id": "string",

  

"@type": "string",

  

"id": "9d1e8a4c-6b2f-4d3e-8a1b-2c3d4e5f6a7b",

  

"name": "www.example.com",

  

"dnsStatus": "valid",

  

"dnsLastCheckedAt": "2026-07-01T12:00:00+00:00",

  

"dnsNextCheckAt": "2026-07-02T12:00:00+00:00",

  

"sslStatus": "covered",

  

"createdAt": "2026-07-01T12:00:00+00:00",

  

"updatedAt": "2026-07-01T12:00:00+00:00"

}

POST

/api/organizations/{organizationId}/certificates/{certificateId}/sans

Playground

Authorization

ApiToken

Variables

Key

Value

organizationId*

certificateId*

Body

Samples

Powered by VitePress OpenAPI