curl --request GET \
--url https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates \
--header 'Authorization: Bearer <token>'import requests
url = "https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"certificates": [
{
"id": "550e8400-e29b-41d4-a716-446655440012",
"crn": "crn:certificate::my-account:certificate/prod-web",
"name": "prod-web",
"domains": [
"www.example.com"
],
"status": "active",
"source": "uploaded",
"key_algorithm": "ecdsa-p256",
"challenges": [],
"certificate_pem": "-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n",
"chain_pem": "-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n",
"issued_at": "2026-10-01T09:30:00Z",
"expires_at": "2026-12-30T09:30:00Z",
"faults": [],
"tags": {}
}
],
"meta": {
"limit": 1,
"has_more": false
}
}{
"error": {
"code": "INVALID_INPUT",
"message": "Invalid request parameters",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "Authentication required",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "ACCESS_DENIED",
"message": "You don't have permission to perform this action",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "NOT_FOUND",
"message": "Resource not found",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "INTERNAL_ERROR",
"message": "An internal error occurred",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}Listar certificados del listener
Devuelve los certificados adjuntos usando el mismo contrato público Certificate de GET /v1/certificates, incluidos dominios, estado, vencimiento, desafíos, fallos y PEM públicos. La colección certificates incluye metadatos finitos de paginación. Compara cada id con listener.default_certificate.id para identificar el predeterminado. Requiere loadbalancer:ListListenerCertificates en el CRN del listener; no requiere permiso del servicio de certificados. Nunca devuelve claves privadas ni UUID de las asociaciones.
curl --request GET \
--url https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates \
--header 'Authorization: Bearer <token>'import requests
url = "https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://loadbalancer.{region}.basaltic.sh/v1/load-balancers/{id}/listeners/{listener_id}/certificates")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"certificates": [
{
"id": "550e8400-e29b-41d4-a716-446655440012",
"crn": "crn:certificate::my-account:certificate/prod-web",
"name": "prod-web",
"domains": [
"www.example.com"
],
"status": "active",
"source": "uploaded",
"key_algorithm": "ecdsa-p256",
"challenges": [],
"certificate_pem": "-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n",
"chain_pem": "-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n",
"issued_at": "2026-10-01T09:30:00Z",
"expires_at": "2026-12-30T09:30:00Z",
"faults": [],
"tags": {}
}
],
"meta": {
"limit": 1,
"has_more": false
}
}{
"error": {
"code": "INVALID_INPUT",
"message": "Invalid request parameters",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "Authentication required",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "ACCESS_DENIED",
"message": "You don't have permission to perform this action",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "NOT_FOUND",
"message": "Resource not found",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "INTERNAL_ERROR",
"message": "An internal error occurred",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}loadbalancer:ListListenerCertificates. Consulta Permisos de LOADBALANCER para ver la lista completa, qué abarca cada acción y un ejemplo de política.Autorizaciones
Un token bearer de OAuth 2.0, enviado como Authorization: Bearer <token>. Esta es la forma recomendada de autenticación.
Obtén el token intercambiando el par de claves de acceso de una cuenta de servicio en POST /v1/oauth/token con grant_type=client_credentials. Es el flujo estándar de credenciales de cliente; las bibliotecas compatibles con OAuth pueden obtener y renovar el token por ti.
curl -s -u "$KEY_ID:$SECRET" -d grant_type=client_credentials \
https://iam.basaltic.sh/v1/oauth/token
Los tokens duran una hora por defecto. El mismo par de claves de acceso también sirve como credencial AWS SigV4 para el endpoint de objetos compatible con S3, que solo acepta ese método de autenticación.
Parámetros de ruta
"4e1f8c2a-9b3d-4f6e-8a1c-2d5e7f9a0b3c"
"e1f2a3b4-c5d6-4789-e0f1-a2b3c4d5e6f7"
Respuesta
Recursos de certificado adjuntos.
Show child attributes
Show child attributes
[
{
"id": "550e8400-e29b-41d4-a716-446655440012",
"crn": "crn:certificate::my-account:certificate/prod-web",
"name": "prod-web",
"domains": ["www.example.com"],
"status": "active",
"source": "uploaded",
"key_algorithm": "ecdsa-p256",
"challenges": [],
"certificate_pem": "-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n",
"chain_pem": "-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n",
"issued_at": "2026-10-01T09:30:00Z",
"expires_at": "2026-12-30T09:30:00Z",
"faults": [],
"tags": {}
}
]
Show child attributes
Show child attributes
{ "limit": 1, "has_more": false }

