List certificates for an organization
Returns every TLS certificate belonging to the organization, covering both auto-managed (ACME) and custom (user-uploaded) certificates. Shared certificates are not listed here. Ordered by expiry date (soonest first) unless an order parameter is given, and filterable by q, status and type.
Authorizations
Long-lived API token created via POST /api/api-tokens (returned once in plaintext). A token created with readOnly may only perform safe requests (GET, HEAD, OPTIONS); write requests are rejected on every endpoint.
JWT access token obtained via POST /api/auth/login. Send as: Authorization: Bearer
Parameters
Path Parameters
Organization identifier
Query Parameters
The collection page number
1The number of items per page
300100Partial, case-insensitive match on the certificate's domain name, its issuer, its fingerprint or any of its SAN names, so a certificate that carries the searched name only as a SAN is still found.
Filter by certificate status: pending, active, expired, renewing or failed.
"pending""active""expired""renewing""failed"Filter by certificate type: auto_managed (ACME) or custom (user-uploaded).
"auto_managed""custom"Sort by expiry date. Accepts asc or desc (defaults to soonest first).
"asc""desc""ASC""DESC"Sort by domain name. Accepts asc or desc.
"asc""desc""ASC""DESC"Sort by status in lifecycle priority, not alphabetically. asc puts the certificates needing attention first, in the order failed, expired, pending, renewing, active, and within one status the soonest expiry first, with certificates that were never issued last. desc reverses that.
"asc""desc"Sort by type, alphabetically by its stored value. Accepts asc or desc.
"asc""desc""ASC""DESC"Responses
certificate collection