MethodPathSummaryAuth
GET/v1/certificate-issuersList the CAs a new certificate request may nameSession

Contract file:api/openapi/v1/dns-acme.yaml

Operation details

GET /v1/certificate-issuers

List the CAs a new certificate request may name

operationId
listCertificateIssuers
Auth
  • Session: the Bearer session of a signed-in control plane user, used by the customer in their own control plane; a plugin must never ask for it.
Required permissions

All of:certificates.read

Description (from the contract)

lets_encrypt and each EAB CA (zerossl, google_trust) whose platform credentials are configured, with the platform default issuer. A request form offers only these; an unconfigured CA is not shown.

Responses

listCertificateIssuers Responses
StatusDescription
200Available issuers.

Fields:items: array<string: lets_encrypt / zerossl / google_trust> default: string: lets_encrypt / zerossl / google_trust

401Authentication is required.
403The active role lacks the required permission.

What to do on failure

  • 401 Check the credential format and whether it expired or was rotated.
  • 403 Check the key scopes, the owner’s current permissions and the tenant scope; never switch to a more privileged account.

↑ Back to list