| 方法 | 路径 | 摘要 | 认证 |
|---|---|---|---|
| GET | /v1/certificate-assets | List active certificate assets | 登录会话 |
| POST | /v1/certificate-assets | Upload a certificate and private key | 登录会话 |
| GET | /v1/certificate-assets/{asset_id} | Get a certificate asset and its public versions | 登录会话 |
| DELETE | /v1/certificate-assets/{asset_id} | Soft-delete an unreferenced certificate asset | 登录会话 |
| GET | /v1/certificate-assets/{asset_id}/bindings | List current site bindings for one certificate asset | 登录会话 |
| POST | /v1/certificate-assets/{asset_id}/bindings | Bind an active version to a tenant site | 登录会话 |
| DELETE | /v1/certificate-assets/{asset_id}/bindings/{site_id} | Append an immutable site unbind fact | 登录会话 |
| POST | /v1/certificate-assets/{asset_id}/versions/{version_id}/activate | Atomically activate one immutable certificate version | 登录会话 |
| POST | /v1/certificate-assets/{asset_id}/versions/{version_id}/revoke | Revoke one certificate version | 登录会话 |
契约文件：api/control-certificate-assets.openapi.yaml