Certificate API
https://api.gandi.net/v5/certificate/
DCV parameters ¶
https://api.gandi.net/v5/certificate/dcv_params
post Retrieve DCV parameters ¶
Get parameters for DCV (Domain Control Validation). DCV is a security check that validates/grants access to the registred domain name.
Despite being a post method, this route does not perform any change on your existing certificates.
If you want to perform a DCV through DNS, pass the parameter dcv_method
with dns
.
Request
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Body
application/json
⁠objectWith the following properties:
Optional
- altnames ⁠array[ string ]Alt Name list, when the certificate package permits it
- csr ⁠stringCertificate Signing Request
- dcv_method ⁠string
One of: "email", "dns", "file", "http", "https"
The certificate validation method - package ⁠stringCertificate package name as returned in the package list route.
- altnames ⁠array[ string ]
Responses
200
Body
application/json
⁠objectWith the following properties:
- altnames ⁠array[ string ]Extracted SANs list from the CSR if any, else an empty data structure.
- dcv_method ⁠string
One of: "email", "dns", "file", "http", "https"
The certificate validation method - fqdns ⁠array[ string ]
- md5 ⁠string
- sha256 ⁠string
Optional
- messages ⁠array[ string ]
- raw_messages ⁠array[ array[ string ] ]
- unique_value ⁠string
- altnames ⁠array[ string ]
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Certificate Create and List ¶
https://api.gandi.net/v5/certificate/issued-certs
get List certificates ¶
Request
Query String
Optional
- cn ⁠stringFilters the list by CN name, with optional patterns.Example:
example.net
Example:example*
Example:*example.com
- covered_cn ⁠stringFilters the list by certificates valid for a given CN.
- package ⁠stringName of the certificate package.
- page ⁠integer
Default: 1
Minimum: 1
Which result page to retrieve. If the number is greater than the last page, an empty list is returned. - per_page ⁠integer
Minimum: 1
How many items to display per page. - sharing_id ⁠stringSharing ID. Organization ID used as a filter or as a billing identifier. See the reference.
- sort_by ⁠string
One of: "created_at", "-created_at", "updated_at", "-updated_at", "started_at", "-started_at", "ends_at", "-ends_at", "subscription_ends_at", "-subscription_ends_at"
Default: "ends_at"
Used to specify how you want the results sorted. - status ⁠string
One of: "pending", "valid", "revoked", "replaced", "replaced_rev", "expired"
- cn ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Responses
200
Headers
- Total-Count ⁠integerTotal number of items.
Optional
- Filtered-Count ⁠integerOn a filtered list, this is the number of matching items.
- Link ⁠stringLinks to next and last page.
- Total-Count ⁠integer
Body
application/json
⁠arrayOf items of type:
- object
With the following properties:
- altnames ⁠array[ string ]Alt Name list, when the certificate package permits it
- altnames_unicode ⁠array[ string ]Alt Name list, when the certificate package permits it
- cn ⁠string
Maximum length: 64
Common Name - cn_unicode ⁠string
Maximum length: 64
Common Name - contact ⁠object
With the following properties:
Optional
- city ⁠string
- country ⁠string
- email ⁠string
- family ⁠string
- given ⁠string
- orgname ⁠string
- state ⁠string
- streetaddr ⁠string
- zip ⁠string
- dates ⁠object
With the following properties:
Optional
- created_at ⁠datetimeinitial creation date of the certificate. In case of renews this is the creation date of the original certificate
- ends_at ⁠datetimevalidity end date of the certificate (notAfter)
- started_at ⁠datetimevalidity start date of the certificate (notBefore)
- subscription_ends_at ⁠datetimein case of certificates that are valid for more than 1 year, the date for which they where initialy bought
- updated_at ⁠datetime
- created_at ⁠datetime
- id ⁠stringUUID
- package ⁠object
With the following properties:
- href ⁠string
- max_domains ⁠integermaximum number of associated names
- name ⁠stringpackage reference name
- name_label ⁠stringhuman readable name of the package
- type ⁠string
- type_label ⁠string
- wildcard ⁠booleantrue if it can be used as wildcard
- provider ⁠stringProvider of this certificate (eg
- software ⁠integer
- status ⁠string
One of: "pending", "valid", "revoked", "replaced", "replaced_rev", "expired"
Optional
- assumed_name ⁠string
- business_category ⁠string
- card_pay_trustlogo ⁠boolean
- cert ⁠string
- csr ⁠string
- dcv_method ⁠string
One of: "email", "dns", "file", "http", "https"
The certificate validation method - error_msg ⁠string
- href ⁠string
- ida ⁠object
With the following properties:
Optional
- email ⁠string
- fax ⁠string
- tel ⁠string
- intermediate ⁠string
- joi ⁠object
With the following properties:
Optional
- country ⁠string
- locality ⁠string
- state ⁠string
- middleman ⁠object
With the following properties:
Optional
- city ⁠string
- country ⁠string
- email ⁠string
- family ⁠string
- given ⁠string
- orgname ⁠string
- state ⁠string
- streetaddr ⁠string
- zip ⁠string
- owner ⁠string
- reissuable ⁠boolean
- renewable ⁠boolean
- sha_version ⁠integer
- sharing_id ⁠string
- state ⁠string
- state_detail ⁠string
- step_nb ⁠integer
One of: 0, 1, 2, 3, 4, 5
Type of nameservers currently set.0
corresponds to 'Starting operation',1
is for 'Payment validation',2
is for 'Contact verification,3
is for 'Documents validation',4
is for 'Domain control validation', and5
is for 'Certificate delivery'. - stored ⁠boolean
- tags ⁠array[ string ]List of tags that have been assigned to the certificate.
- trustlogo ⁠boolean
- trustlogo_token ⁠object
- altnames ⁠array[ string ]
- object
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
post Create a new certificate ¶
This route creates a new certificate.
The parameters can receive either a CSR or a CN.
Important: All certificates are valid for one year regardless of the duration
value. For longer durations, you must update the certificate using PATCH /issued-certs/{id}.
Request
Query String
Optional
- sharing_id ⁠stringSharing ID. Organization ID used as a filter or as a billing identifier. See the reference.
- sharing_id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
Optional
- Dry-Run ⁠integerIf this header's value is
1
the request's parameters will only be checked; the operation will not actually be performed.
- Authorization ⁠string
Body
application/json
⁠objectWith the following properties:
Required
- package ⁠stringCertificate package name as returned in the package list route.
Optional
- altnames ⁠array[ string ]Alt Name list, when the certificate package permits it
- cn ⁠string
Maximum length: 64
Common Name - csr ⁠stringCertificate Signing Request
- dcv_method ⁠string
One of: "email", "dns", "file", "http", "https"
The certificate validation method - duration ⁠integer
Default: 1
Minimum: 1
- resellee_id ⁠stringCustomer id that will own the certificate. (See customer API] This useful for pro and business certificates where a validation will be made on the company name
- package ⁠string
Responses
200
Dry-Run: 1
header.Headers
Optional
- Warning ⁠stringWarning message
- Warning ⁠string
Body
application/json
⁠objectWith the following properties:
- status ⁠string
One of: "success", "error"
Response status.
Optional
- errors ⁠arrayA list of all the errors encountered during validation.
Of items of type:
- object
With the following properties:
- description ⁠stringError message.
- location ⁠string
One of: "header", "path", "querystring", "body"
The field's location in the HTTP response. - name ⁠stringThe xpath of the field.
- description ⁠string
- object
- status ⁠string
202
Headers
Optional
- Location ⁠string
Body
application/json
⁠objectWith the following properties:
- href ⁠string
- id ⁠stringCertificate ID
- message ⁠stringConfirmation message.
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Certificate information ¶
https://api.gandi.net/v5/certificate/issued-certs/{id}
get Certificate details ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Responses
200
Body
application/json
⁠objectWith the following properties:
- altnames ⁠array[ string ]Alt Name list, when the certificate package permits it
- altnames_unicode ⁠array[ string ]Alt Name list, when the certificate package permits it
- cn ⁠string
Maximum length: 64
Common Name - cn_unicode ⁠string
Maximum length: 64
Common Name - contact ⁠object
With the following properties:
Optional
- city ⁠string
- country ⁠string
- email ⁠string
- family ⁠string
- given ⁠string
- orgname ⁠string
- state ⁠string
- streetaddr ⁠string
- zip ⁠string
- dates ⁠object
With the following properties:
Optional
- created_at ⁠datetimeinitial creation date of the certificate. In case of renews this is the creation date of the original certificate
- ends_at ⁠datetimevalidity end date of the certificate (notAfter)
- started_at ⁠datetimevalidity start date of the certificate (notBefore)
- subscription_ends_at ⁠datetimein case of certificates that are valid for more than 1 year, the date for which they where initialy bought
- updated_at ⁠datetime
- created_at ⁠datetime
- id ⁠stringUUID
- package ⁠object
With the following properties:
- href ⁠string
- max_domains ⁠integermaximum number of associated names
- name ⁠stringpackage reference name
- name_label ⁠stringhuman readable name of the package
- type ⁠string
- type_label ⁠string
- wildcard ⁠booleantrue if it can be used as wildcard
- provider ⁠stringProvider of this certificate (eg
- software ⁠integer
- status ⁠string
One of: "pending", "valid", "revoked", "replaced", "replaced_rev", "expired"
Optional
- assumed_name ⁠string
- business_category ⁠string
- card_pay_trustlogo ⁠boolean
- cert ⁠string
- csr ⁠string
- dcv_method ⁠string
One of: "email", "dns", "file", "http", "https"
The certificate validation method - error_msg ⁠string
- href ⁠string
- ida ⁠object
With the following properties:
Optional
- email ⁠string
- fax ⁠string
- tel ⁠string
- intermediate ⁠string
- joi ⁠object
With the following properties:
Optional
- country ⁠string
- locality ⁠string
- state ⁠string
- middleman ⁠object
With the following properties:
Optional
- city ⁠string
- country ⁠string
- email ⁠string
- family ⁠string
- given ⁠string
- orgname ⁠string
- state ⁠string
- streetaddr ⁠string
- zip ⁠string
- owner ⁠string
- reissuable ⁠boolean
- renewable ⁠boolean
- sha_version ⁠integer
- sharing_id ⁠string
- state ⁠string
- state_detail ⁠string
- step_nb ⁠integer
One of: 0, 1, 2, 3, 4, 5
Type of nameservers currently set.0
corresponds to 'Starting operation',1
is for 'Payment validation',2
is for 'Contact verification,3
is for 'Documents validation',4
is for 'Domain control validation', and5
is for 'Certificate delivery'. - stored ⁠boolean
- tags ⁠array[ string ]List of tags that have been assigned to the certificate.
- trustlogo ⁠boolean
- trustlogo_token ⁠object
- altnames ⁠array[ string ]
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
post Renew a certificate ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Query String
Optional
- sharing_id ⁠stringSharing ID. Organization ID used as a filter or as a billing identifier. See the reference.
- sharing_id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
Optional
- Dry-Run ⁠integerIf this header's value is
1
the request's parameters will only be checked; the operation will not actually be performed.
- Authorization ⁠string
Body
application/json
⁠objectWith the following properties:
Optional
- csr ⁠string
- dcv_method ⁠string
- duration ⁠integer
Responses
200
Dry-Run: 1
header.Headers
Optional
- Warning ⁠stringWarning message
- Warning ⁠string
Body
application/json
⁠objectWith the following properties:
- status ⁠string
One of: "success", "error"
Response status.
Optional
- errors ⁠arrayA list of all the errors encountered during validation.
Of items of type:
- object
With the following properties:
- description ⁠stringError message.
- location ⁠string
One of: "header", "path", "querystring", "body"
The field's location in the HTTP response. - name ⁠stringThe xpath of the field.
- description ⁠string
- object
- status ⁠string
202
Headers
Optional
- Location ⁠string
Body
application/json
⁠objectWith the following properties:
- message ⁠stringConfirmation message.
- message ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
patch Update a certificate ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Query String
Optional
- sharing_id ⁠stringSharing ID. Organization ID used as a filter or as a billing identifier. See the reference.
- sharing_id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
Optional
- Dry-Run ⁠integerIf this header's value is
1
the request's parameters will only be checked; the operation will not actually be performed.
- Authorization ⁠string
Body
application/json
⁠objectWith the following properties:
Optional
- altnames ⁠array[ string ]
- csr ⁠string
- dcv_method ⁠string
Responses
200
Dry-Run: 1
header.Headers
Optional
- Warning ⁠stringWarning message
- Warning ⁠string
Body
application/json
⁠objectWith the following properties:
- status ⁠string
One of: "success", "error"
Response status.
Optional
- errors ⁠arrayA list of all the errors encountered during validation.
Of items of type:
- object
With the following properties:
- description ⁠stringError message.
- location ⁠string
One of: "header", "path", "querystring", "body"
The field's location in the HTTP response. - name ⁠stringThe xpath of the field.
- description ⁠string
- object
- status ⁠string
202
Headers
Optional
- Location ⁠string
Body
application/json
⁠objectWith the following properties:
- message ⁠stringConfirmation message.
- message ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
delete Revoke a certificate ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Query String
Optional
- sharing_id ⁠stringSharing ID. Organization ID used as a filter or as a billing identifier. See the reference.
- sharing_id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Responses
204
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Retrieve certificate ¶
https://api.gandi.net/v5/certificate/issued-certs/{id}/crt
get Retrieve certificate ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Responses
200
Body
text/plain
⁠stringthe certificate
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Certificate validation ¶
https://api.gandi.net/v5/certificate/issued-certs/{id}/dcv
put Resend the DCV ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Query String
Optional
- sharing_id ⁠stringSharing ID. Organization ID used as a filter or as a billing identifier. See the reference.
- sharing_id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Responses
202
Headers
Optional
- Location ⁠string
Body
application/json
⁠objectWith the following properties:
- message ⁠stringConfirmation message.
- message ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
patch Update the DCV method ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Query String
Optional
- sharing_id ⁠stringSharing ID. Organization ID used as a filter or as a billing identifier. See the reference.
- sharing_id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Body
application/json
⁠objectWith the following properties:
Required
- method ⁠string
One of: "email", "dns", "file", "http", "https"
- method ⁠string
Responses
201
Headers
Optional
- Location ⁠string
Body
application/json
⁠objectWith the following properties:
- message ⁠stringConfirmation message.
- message ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
DCV parameters ¶
https://api.gandi.net/v5/certificate/issued-certs/{id}/dcv_params
post Retrieve DCV parameters ¶
Get parameters for DCV (Domain Control Validation). DCV is a security check that validates/grants access to the registred domain name.
Despite being a post method, this route does not perform any change on your existing certificates.
If you want to perform a DCV through DNS, pass the parameter dcv_method
with dns
.
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Body
application/json
⁠objectWith the following properties:
Optional
- csr ⁠stringCertificate Signing Request
- dcv_method ⁠string
One of: "email", "dns", "file", "http", "https"
The certificate validation method - package ⁠stringCertificate package name as returned in the package list route.
- csr ⁠string
Responses
200
Body
application/json
⁠objectWith the following properties:
- altnames ⁠array[ string ]Extracted SANs list from the CSR if any, else an empty data structure.
- dcv_method ⁠string
One of: "email", "dns", "file", "http", "https"
The certificate validation method - fqdns ⁠array[ string ]
- md5 ⁠string
- sha256 ⁠string
Optional
- messages ⁠array[ string ]
- raw_messages ⁠array[ array[ string ] ]
- unique_value ⁠string
- altnames ⁠array[ string ]
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Manage certificate tags ¶
https://api.gandi.net/v5/certificate/issued-certs/{id}/tags
get Get the list of tags linked to a certificate ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Responses
200
Body
application/json
⁠array[ string ]Example:[ "server1", "server2" ]
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
post Attach a new tag to the certificate ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Body
application/json
⁠objectWith the following properties:
Required
- tag ⁠string
Example:{ "tag": "server42" }
Responses
201
Headers
Optional
- Location ⁠string
Body
application/json
⁠objectWith the following properties:
- message ⁠stringConfirmation message.
- message ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
put Replace all the tags of the certificate ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Body
application/json
⁠objectWith the following properties:
Required
- tags ⁠array[ string ]
Example:{ "tags": [ "server42", "server55" ] }
Responses
201
Headers
Optional
- Location ⁠string
Body
application/json
⁠objectWith the following properties:
- message ⁠stringConfirmation message.
- message ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
patch Update some of the tags of the certificate ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Body
application/json
⁠objectWith the following properties:
Required
- add ⁠array[ string ]
- remove ⁠array[ string ]
Example:{ "add": [ "server79" ], "remove": [ "server55" ] }
Responses
201
Headers
Optional
- Location ⁠string
Body
application/json
⁠objectWith the following properties:
- message ⁠stringConfirmation message.
- message ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
delete Remove all tags from this certificate ¶
Request
URI Parameters
- id ⁠stringCertificate ID
- id ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Responses
200
Body
application/json
⁠objectWith the following properties:
- message ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Certificate Packages ¶
https://api.gandi.net/v5/certificate/packages
get Package list ¶
Request
Query String
Optional
- category ⁠string
- max_domains ⁠integer
- min_domains ⁠integer
- page ⁠integer
Default: 1
Minimum: 1
Which result page to retrieve. If the number is greater than the last page, an empty list is returned. - per_page ⁠integer
Minimum: 1
How many items to display per page. - trustlogo ⁠boolean
- warranty ⁠integer
- wildcard ⁠boolean
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Responses
200
Headers
- Total-Count ⁠integerTotal number of items.
Optional
- Link ⁠stringLinks to next and last page.
- Total-Count ⁠integer
Body
application/json
⁠arrayOf items of type:
- object
With the following properties:
- category ⁠object
With the following properties:
- name ⁠stringcategory of the package (standard, pro, business, …)
- name ⁠string
- href ⁠string
- max_domains ⁠integermaximum number of associated names
- min_domains ⁠integerminimum number of associated names (always 1)
- name ⁠stringreference that should be used when requesting a new certificate. See this list for possible values.
- provider ⁠stringProvider of this package
- sgc ⁠booleandeprecated "Server Gated Cryptography", packages with this flag are actually discarded
- trustlogo ⁠boolean
- warranty ⁠integer
- wildcard ⁠booleanshould be used for wildcard certificates
- category ⁠object
- object
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Package information ¶
https://api.gandi.net/v5/certificate/packages/{name}
get Package information ¶
Request
URI Parameters
- name ⁠stringPackage name, see this list for possible values
- name ⁠string
Responses
200
Body
application/json
⁠objectWith the following properties:
- category ⁠object
With the following properties:
- name ⁠stringcategory of the package (standard, pro, business, …)
- name ⁠string
- href ⁠string
- max_domains ⁠integermaximum number of associated names
- min_domains ⁠integerminimum number of associated names (always 1)
- name ⁠stringreference that should be used when requesting a new certificate. See this list for possible values.
- provider ⁠stringProvider of this package
- sgc ⁠booleandeprecated "Server Gated Cryptography", packages with this flag are actually discarded
- trustlogo ⁠boolean
- warranty ⁠integer
- wildcard ⁠booleanshould be used for wildcard certificates
- category ⁠object
Intermediate certificate, by filename ¶
https://api.gandi.net/v5/certificate/pem/-/{filename}
get Intermediate certificate ¶
Request
URI Parameters
- filename ⁠stringFilename
- filename ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
Optional
- Accept ⁠stringWhen passed
application/x-pem-file
value, this route will download the intermediate certificate.
- Authorization ⁠string
Responses
200
Body
text/plain
⁠stringPlain text intermediate certificate.
application/x-pem-file
⁠fileDownload the intermediate certificate.
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Intermediate certificate ¶
https://api.gandi.net/v5/certificate/pem/{type}
get Intermediate certificate ¶
Request
URI Parameters
- type ⁠string
One of: "cert_std", "cert_pro"
Certificate type
- type ⁠string
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
Optional
- Accept ⁠stringWhen passed
application/x-pem-file
value, this route will download the intermediate certificate.
- Authorization ⁠string
Responses
200
Body
text/plain
⁠stringPlain text intermediate certificate.
application/x-pem-file
⁠fileDownload the intermediate certificate.
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
401
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
403
Body
application/json
⁠objectWith the following properties:
- cause ⁠string
- code ⁠integer
- message ⁠string
- object ⁠string
Secured by
Http Authorization Scheme
This authentication scheme allows you to pass your Personal Access Token and be granted access to permissions and resources scoped by this token.
Tokens are created in the Organization Tab of the Gandi Admin application, choose the organization the token will have access too. Then go to the sharing tab, and click on "Create a token" button.
The authentication scheme Apikey allows also you to pass your Gandi API Key, but has been deprecated.
Headers
Required
- Authorization ⁠stringThe
Authorization
header must start withBearer
for access token, orApikey
depending of the authentication scheme.Apikey
is deprecated and be replaced by personal access token.Example:Bearer pat_abc-123
Example:Apikey your-api-key
- Authorization ⁠string
Appendix
Certificate Packages ¶
Name | Description | Provider |
---|---|---|
cert_std_1_0_0 | Standard certificate with 1 fqdn | Sectigo |
cert_std_3_0_0 | Standard certificate with 3 fqdn | Sectigo |
cert_std_5_0_0 | Standard certificate with 5 fqdn | Sectigo |
cert_std_10_0_0 | Standard certificate with 10 fqdn | Sectigo |
cert_std_20_0_0 | Standard certificate with 20 fqdn | Sectigo |
cert_std_w_0_0 | Standard certificate with fqdn with wildcard | Sectigo |
cert_pro_1_10_0 | Pro certificate with 1 fqdn | Sectigo |
cert_pro_1_100_0 | Pro certificate with 1 fqdn | Sectigo |
cert_pro_1_100_SGC | Pro certificate with 1 fqdn | Sectigo |
cert_pro_1_250_0 | Pro certificate with 1 fqdn | Sectigo |
cert_pro_w_250_0 | Pro certificate with fqdn with wildcard | Sectigo |
cert_pro_w_250_SGC | Pro certificate with fqdn with wildcard | Sectigo |
cert_bus_1_250_0 | Business certificate with 1 fqdn | Sectigo |
cert_bus_1_250_SGC | Business certificate with 1 fqdn | Sectigo |
cert_bus_3_250_0 | Business certificate with 3 fqdn | Sectigo |
cert_bus_5_250_0 | Business certificate with 5 fqdn | Sectigo |
cert_bus_10_250_0 | Business certificate with 10 fqdn | Sectigo |
cert_bus_20_250_0 | Business certificate with 20 fqdn | Sectigo |
cert_std_1_10_0_digicert | Standard certificate with 1 fqdn | Digicert |
cert_std_3_10_0_digicert | Standard certificate with 3 fqdn | Digicert |
cert_std_5_10_0_digicert | Standard certificate with 5 fqdn | Digicert |
cert_std_10_10_0_digicert | Standard certificate with 10 fqdn | Digicert |
cert_std_20_10_0_digicert | Standard certificate with 20 fqdn | Digicert |
cert_std_w_10_0_digicert | Standard certificate with fqdn with wildcard | Digicert |
cert_pro_1_250_0_digicert | Pro certificate with 1 fqdn | Digicert |
cert_pro_250_250_0_digicert | Pro certificate with 250 fqdn | Digicert |
cert_pro_w_125_0_digicert | Pro certificate with fqdn with wildcard | Digicert |
cert_bus_1_1500_0_digicert | Business certificate with 1 fqdn | Digicert |
cert_bus_3_1500_0_digicert | Business certificate with 3 fqdn | Digicert |
cert_bus_5_1500_0_digicert | Business certificate with 5 fqdn | Digicert |
cert_bus_10_1500_0_digicert | Business certificate with 10 fqdn | Digicert |
cert_bus_20_1500_0_digicert | Business certificate with 20 fqdn | Digicert |