Get certificate status

GET

/domains/{domain}/ssl/

const url = 'https://api.nsin.ir/domains/example.com/ssl/';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://api.nsin.ir/domains/example.com/ssl/ \
  --header 'Authorization: Bearer <token>'

The domain’s current certificate — issuer, validity, SANs, key size — plus whether a manual re-issue is currently allowed, and coverage: proxied hostnames that are not on the certificate yet, with their retry state.

Authorizations

bearerAuth
apiKeyAuth

Parameters

Path Parameters

domain

required

string

The domain name (for example example.com) — not a numeric id.

Example

example.com

Responses

200

Certificate status.

application/json

object

status

string

expires_at

string format: date-time

issued_at

string format: date-time

days_remaining

integer

issuer

string

subject

string

serial_number

string

sans

Array<string>

signature_algorithm

string

key_size

integer

is_wildcard

boolean

auto_renewal

boolean

has_private_key

boolean

can_manual_issue

Whether POST /domains/{domain}/ssl/issue would be accepted right now.

boolean

manual_issue_reason

Why manual issuance is unavailable, when can_manual_issue is false.

string

next_manual_issue_at

string format: date-time

last_issue_attempt_at

string format: date-time

coverage

Proxied hostnames not yet on the certificate. Absent when coverage is complete.

Array<object>

A proxied hostname that the domain’s certificate does not cover yet.

object

hostname

string

status

string

Allowed values: pending failed missing

failure_count

integer

max_retries

integer

next_retry_at

string format: date-time

last_error

The certificate authority’s own reason for the last failure.

string

Example

{
  "status": "active",
  "coverage": [
    {
      "status": "pending"
    }
  ]
}

401

Missing, malformed, revoked or expired API key — or the owning account is inactive.

application/json

The single error shape used by every endpoint.

object

error

required

Human-readable description of what went wrong.

string

Examples

invalidKey

{
  "error": "invalid API key"
}

404

No such domain, or it is not visible to this account. Domains you cannot access are reported as not found rather than forbidden.

application/json

The single error shape used by every endpoint.

object

error

required

Human-readable description of what went wrong.

string

Example

{
  "error": "read-only API key"
}

429

The key exceeded its request budget (300 requests per minute by default).

application/json

The single error shape used by every endpoint.

object

error

required

Human-readable description of what went wrong.

string

Examples

limited

{
  "error": "rate limit exceeded"
}