Skip to main content
GET
List certificates
Requires the IAM action certificate:ListCertificates. See CERTIFICATE permissions for the full list, what each one covers, and an example policy.

Authorizations

Authorization
string
header
required

An OAuth 2.0 bearer token, sent as Authorization: Bearer <token>. This is the recommended way to authenticate.

Get one by exchanging a service account's access key pair at POST /v1/oauth/token with grant_type=client_credentials. It is the standard client-credentials grant, so any OAuth-aware library will obtain and refresh it for you.

Tokens last an hour by default. The same access key pair is separately your AWS SigV4 credential for the S3-compatible object endpoint, which speaks nothing else.

Query Parameters

name
string

Exact, case-sensitive certificate name within the caller's account.

crn
string

Exact certificate CRN. Foreign accounts or mismatched service, type or region return an empty page; malformed syntax returns 400. Combined conjunctively with name before pagination.

limit
integer
default:50
Required range: 1 <= x <= 500
Example:

50

marker
string<uuid>

Resume token — the last certificate id from the previous page.

Example:

"7c9e6679-7425-40de-944b-e07fc1f90ae7"

Response

List of certificates

certificates
object[]
meta
object