Criar certificado
curl --request POST \
--url https://certificate.{region}.basaltic.sh/v1/certificates \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"name": "prod-frontend",
"domains": [
"example.com",
"www.example.com",
"api.example.com"
],
"key_algorithm": "ecdsa-p256",
"source": "acme",
"certificate_pem": "-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n",
"chain_pem": "-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n",
"private_key_pem": "-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEG...\n-----END PRIVATE KEY-----\n",
"tags": {
"environment": "production",
"team": "backend"
}
}
'import requests
url = "https://certificate.{region}.basaltic.sh/v1/certificates"
payload = {
"name": "prod-frontend",
"domains": ["example.com", "www.example.com", "api.example.com"],
"key_algorithm": "ecdsa-p256",
"source": "acme",
"certificate_pem": "-----BEGIN CERTIFICATE-----
MIIDdzCCAl+gAwIBAgIEAaH...
-----END CERTIFICATE-----
",
"chain_pem": "-----BEGIN CERTIFICATE-----
MIIEFzCCAv+gAwIBAgIEBb2...
-----END CERTIFICATE-----
",
"private_key_pem": "-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEG...
-----END PRIVATE KEY-----
",
"tags": {
"environment": "production",
"team": "backend"
}
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
name: 'prod-frontend',
domains: ['example.com', 'www.example.com', 'api.example.com'],
key_algorithm: 'ecdsa-p256',
source: 'acme',
certificate_pem: '-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n',
chain_pem: '-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n',
private_key_pem: '-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEG...\n-----END PRIVATE KEY-----\n',
tags: {environment: 'production', team: 'backend'}
})
};
fetch('https://certificate.{region}.basaltic.sh/v1/certificates', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://certificate.{region}.basaltic.sh/v1/certificates",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'name' => 'prod-frontend',
'domains' => [
'example.com',
'www.example.com',
'api.example.com'
],
'key_algorithm' => 'ecdsa-p256',
'source' => 'acme',
'certificate_pem' => '-----BEGIN CERTIFICATE-----
MIIDdzCCAl+gAwIBAgIEAaH...
-----END CERTIFICATE-----
',
'chain_pem' => '-----BEGIN CERTIFICATE-----
MIIEFzCCAv+gAwIBAgIEBb2...
-----END CERTIFICATE-----
',
'private_key_pem' => '-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEG...
-----END PRIVATE KEY-----
',
'tags' => [
'environment' => 'production',
'team' => 'backend'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://certificate.{region}.basaltic.sh/v1/certificates"
payload := strings.NewReader("{\n \"name\": \"prod-frontend\",\n \"domains\": [\n \"example.com\",\n \"www.example.com\",\n \"api.example.com\"\n ],\n \"key_algorithm\": \"ecdsa-p256\",\n \"source\": \"acme\",\n \"certificate_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIDdzCCAl+gAwIBAgIEAaH...\\n-----END CERTIFICATE-----\\n\",\n \"chain_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIEFzCCAv+gAwIBAgIEBb2...\\n-----END CERTIFICATE-----\\n\",\n \"private_key_pem\": \"-----BEGIN PRIVATE KEY-----\\nMIGHAgEAMBMGByqGSM49AgEG...\\n-----END PRIVATE KEY-----\\n\",\n \"tags\": {\n \"environment\": \"production\",\n \"team\": \"backend\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://certificate.{region}.basaltic.sh/v1/certificates")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"name\": \"prod-frontend\",\n \"domains\": [\n \"example.com\",\n \"www.example.com\",\n \"api.example.com\"\n ],\n \"key_algorithm\": \"ecdsa-p256\",\n \"source\": \"acme\",\n \"certificate_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIDdzCCAl+gAwIBAgIEAaH...\\n-----END CERTIFICATE-----\\n\",\n \"chain_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIEFzCCAv+gAwIBAgIEBb2...\\n-----END CERTIFICATE-----\\n\",\n \"private_key_pem\": \"-----BEGIN PRIVATE KEY-----\\nMIGHAgEAMBMGByqGSM49AgEG...\\n-----END PRIVATE KEY-----\\n\",\n \"tags\": {\n \"environment\": \"production\",\n \"team\": \"backend\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://certificate.{region}.basaltic.sh/v1/certificates")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"name\": \"prod-frontend\",\n \"domains\": [\n \"example.com\",\n \"www.example.com\",\n \"api.example.com\"\n ],\n \"key_algorithm\": \"ecdsa-p256\",\n \"source\": \"acme\",\n \"certificate_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIDdzCCAl+gAwIBAgIEAaH...\\n-----END CERTIFICATE-----\\n\",\n \"chain_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIEFzCCAv+gAwIBAgIEBb2...\\n-----END CERTIFICATE-----\\n\",\n \"private_key_pem\": \"-----BEGIN PRIVATE KEY-----\\nMIGHAgEAMBMGByqGSM49AgEG...\\n-----END PRIVATE KEY-----\\n\",\n \"tags\": {\n \"environment\": \"production\",\n \"team\": \"backend\"\n }\n}"
response = http.request(request)
puts response.read_body{
"certificate": {
"faults": [
{
"code": "BACKUP_FAILED",
"severity": "error",
"message": "Backup upload failed.",
"details": {},
"first_at": "2023-11-07T05:31:56Z",
"last_at": "2023-11-07T05:31:56Z",
"occurrences": 1
}
],
"id": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
"crn": "crn:certificate::my-account:certificate/prod-frontend",
"name": "prod-frontend",
"domains": [
"example.com",
"www.example.com",
"api.example.com"
],
"status": "active",
"source": "acme",
"key_algorithm": "ecdsa-p256",
"challenges": [
{
"faults": [
{
"code": "BACKUP_FAILED",
"severity": "error",
"message": "Backup upload failed.",
"details": {},
"first_at": "2023-11-07T05:31:56Z",
"last_at": "2023-11-07T05:31:56Z",
"occurrences": 1
}
],
"domain": "*.example.com",
"cname_record_name": "_acme-challenge.example.com.",
"expected_cname": "a1b2c3d4e5f6g7h8.acme.basaltic.cloud.",
"our_dns": true,
"verified": true,
"verified_at": "2026-01-15T09:28:00Z"
}
],
"certificate_pem": "-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n",
"chain_pem": "-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n",
"fingerprint": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2",
"issued_at": "2026-01-15T09:30:00Z",
"expires_at": "2026-04-15T09:30:00Z",
"tags": {
"environment": "production",
"team": "backend"
}
}
}{
"certificate": {
"faults": [
{
"code": "BACKUP_FAILED",
"severity": "error",
"message": "Backup upload failed.",
"details": {},
"first_at": "2023-11-07T05:31:56Z",
"last_at": "2023-11-07T05:31:56Z",
"occurrences": 1
}
],
"id": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
"crn": "crn:certificate::my-account:certificate/prod-frontend",
"name": "prod-frontend",
"domains": [
"example.com",
"www.example.com",
"api.example.com"
],
"status": "active",
"source": "acme",
"key_algorithm": "ecdsa-p256",
"challenges": [
{
"faults": [
{
"code": "BACKUP_FAILED",
"severity": "error",
"message": "Backup upload failed.",
"details": {},
"first_at": "2023-11-07T05:31:56Z",
"last_at": "2023-11-07T05:31:56Z",
"occurrences": 1
}
],
"domain": "*.example.com",
"cname_record_name": "_acme-challenge.example.com.",
"expected_cname": "a1b2c3d4e5f6g7h8.acme.basaltic.cloud.",
"our_dns": true,
"verified": true,
"verified_at": "2026-01-15T09:28:00Z"
}
],
"certificate_pem": "-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n",
"chain_pem": "-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n",
"fingerprint": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2",
"issued_at": "2026-01-15T09:30:00Z",
"expires_at": "2026-04-15T09:30:00Z",
"tags": {
"environment": "production",
"team": "backend"
}
}
}{
"error": {
"code": "INVALID_INPUT",
"message": "Invalid request parameters",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "Authentication required",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "ACCESS_DENIED",
"message": "You don't have permission to perform this action",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "INVALID_INPUT",
"message": "Invalid request parameters",
"request_id": "550e8400-e29b-41d4-a716-446655440000",
"params": {
"instances": 2,
"pools": 0
}
}
}{
"error": {
"code": "IDEMPOTENCY_KEY_REUSED",
"message": "This Idempotency-Key was already used with a different request payload",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "INTERNAL_ERROR",
"message": "An internal error occurred",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}Certificados
Criar certificado
Crie um novo certificado. Padrões para emissão ACME; definir source=uploaded para armazenar material PEM fornecido pelo cliente diretamente.
Para fonte ACME: retorna 202 com status pending_dns e uma entrada de challenges por domínio normalizado, incluindo cname_record_name, expected_cname e our_dns. Use esses campos diretamente da resposta de criação para configurar o DNS. O planejamento de desafios é concluído antes que a criação seja aceita; uma falha de planejamento rejeita a solicitação sem salvar um certificado ou um plano de desafios parcial.
Quando our_dns=true, o CNAME é criado automaticamente durante a emissão assíncrona. Caso contrário, publique cname_record_name CNAME expected_cname no seu provedor de DNS. Os curingas são validados pelo nome principal; um apex e seu curinga compartilham o mesmo CNAME. Poll GET /v1/certificates/ para ver o progresso. O certificado torna-se ativo quando cada desafio é verificado e a emissão é concluída.
Para fonte enviada: retorna 201 com status ativo.
POST
/
v1
/
certificates
Criar certificado
curl --request POST \
--url https://certificate.{region}.basaltic.sh/v1/certificates \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"name": "prod-frontend",
"domains": [
"example.com",
"www.example.com",
"api.example.com"
],
"key_algorithm": "ecdsa-p256",
"source": "acme",
"certificate_pem": "-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n",
"chain_pem": "-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n",
"private_key_pem": "-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEG...\n-----END PRIVATE KEY-----\n",
"tags": {
"environment": "production",
"team": "backend"
}
}
'import requests
url = "https://certificate.{region}.basaltic.sh/v1/certificates"
payload = {
"name": "prod-frontend",
"domains": ["example.com", "www.example.com", "api.example.com"],
"key_algorithm": "ecdsa-p256",
"source": "acme",
"certificate_pem": "-----BEGIN CERTIFICATE-----
MIIDdzCCAl+gAwIBAgIEAaH...
-----END CERTIFICATE-----
",
"chain_pem": "-----BEGIN CERTIFICATE-----
MIIEFzCCAv+gAwIBAgIEBb2...
-----END CERTIFICATE-----
",
"private_key_pem": "-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEG...
-----END PRIVATE KEY-----
",
"tags": {
"environment": "production",
"team": "backend"
}
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
name: 'prod-frontend',
domains: ['example.com', 'www.example.com', 'api.example.com'],
key_algorithm: 'ecdsa-p256',
source: 'acme',
certificate_pem: '-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n',
chain_pem: '-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n',
private_key_pem: '-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEG...\n-----END PRIVATE KEY-----\n',
tags: {environment: 'production', team: 'backend'}
})
};
fetch('https://certificate.{region}.basaltic.sh/v1/certificates', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://certificate.{region}.basaltic.sh/v1/certificates",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'name' => 'prod-frontend',
'domains' => [
'example.com',
'www.example.com',
'api.example.com'
],
'key_algorithm' => 'ecdsa-p256',
'source' => 'acme',
'certificate_pem' => '-----BEGIN CERTIFICATE-----
MIIDdzCCAl+gAwIBAgIEAaH...
-----END CERTIFICATE-----
',
'chain_pem' => '-----BEGIN CERTIFICATE-----
MIIEFzCCAv+gAwIBAgIEBb2...
-----END CERTIFICATE-----
',
'private_key_pem' => '-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEG...
-----END PRIVATE KEY-----
',
'tags' => [
'environment' => 'production',
'team' => 'backend'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://certificate.{region}.basaltic.sh/v1/certificates"
payload := strings.NewReader("{\n \"name\": \"prod-frontend\",\n \"domains\": [\n \"example.com\",\n \"www.example.com\",\n \"api.example.com\"\n ],\n \"key_algorithm\": \"ecdsa-p256\",\n \"source\": \"acme\",\n \"certificate_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIDdzCCAl+gAwIBAgIEAaH...\\n-----END CERTIFICATE-----\\n\",\n \"chain_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIEFzCCAv+gAwIBAgIEBb2...\\n-----END CERTIFICATE-----\\n\",\n \"private_key_pem\": \"-----BEGIN PRIVATE KEY-----\\nMIGHAgEAMBMGByqGSM49AgEG...\\n-----END PRIVATE KEY-----\\n\",\n \"tags\": {\n \"environment\": \"production\",\n \"team\": \"backend\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://certificate.{region}.basaltic.sh/v1/certificates")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"name\": \"prod-frontend\",\n \"domains\": [\n \"example.com\",\n \"www.example.com\",\n \"api.example.com\"\n ],\n \"key_algorithm\": \"ecdsa-p256\",\n \"source\": \"acme\",\n \"certificate_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIDdzCCAl+gAwIBAgIEAaH...\\n-----END CERTIFICATE-----\\n\",\n \"chain_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIEFzCCAv+gAwIBAgIEBb2...\\n-----END CERTIFICATE-----\\n\",\n \"private_key_pem\": \"-----BEGIN PRIVATE KEY-----\\nMIGHAgEAMBMGByqGSM49AgEG...\\n-----END PRIVATE KEY-----\\n\",\n \"tags\": {\n \"environment\": \"production\",\n \"team\": \"backend\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://certificate.{region}.basaltic.sh/v1/certificates")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"name\": \"prod-frontend\",\n \"domains\": [\n \"example.com\",\n \"www.example.com\",\n \"api.example.com\"\n ],\n \"key_algorithm\": \"ecdsa-p256\",\n \"source\": \"acme\",\n \"certificate_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIDdzCCAl+gAwIBAgIEAaH...\\n-----END CERTIFICATE-----\\n\",\n \"chain_pem\": \"-----BEGIN CERTIFICATE-----\\nMIIEFzCCAv+gAwIBAgIEBb2...\\n-----END CERTIFICATE-----\\n\",\n \"private_key_pem\": \"-----BEGIN PRIVATE KEY-----\\nMIGHAgEAMBMGByqGSM49AgEG...\\n-----END PRIVATE KEY-----\\n\",\n \"tags\": {\n \"environment\": \"production\",\n \"team\": \"backend\"\n }\n}"
response = http.request(request)
puts response.read_body{
"certificate": {
"faults": [
{
"code": "BACKUP_FAILED",
"severity": "error",
"message": "Backup upload failed.",
"details": {},
"first_at": "2023-11-07T05:31:56Z",
"last_at": "2023-11-07T05:31:56Z",
"occurrences": 1
}
],
"id": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
"crn": "crn:certificate::my-account:certificate/prod-frontend",
"name": "prod-frontend",
"domains": [
"example.com",
"www.example.com",
"api.example.com"
],
"status": "active",
"source": "acme",
"key_algorithm": "ecdsa-p256",
"challenges": [
{
"faults": [
{
"code": "BACKUP_FAILED",
"severity": "error",
"message": "Backup upload failed.",
"details": {},
"first_at": "2023-11-07T05:31:56Z",
"last_at": "2023-11-07T05:31:56Z",
"occurrences": 1
}
],
"domain": "*.example.com",
"cname_record_name": "_acme-challenge.example.com.",
"expected_cname": "a1b2c3d4e5f6g7h8.acme.basaltic.cloud.",
"our_dns": true,
"verified": true,
"verified_at": "2026-01-15T09:28:00Z"
}
],
"certificate_pem": "-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n",
"chain_pem": "-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n",
"fingerprint": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2",
"issued_at": "2026-01-15T09:30:00Z",
"expires_at": "2026-04-15T09:30:00Z",
"tags": {
"environment": "production",
"team": "backend"
}
}
}{
"certificate": {
"faults": [
{
"code": "BACKUP_FAILED",
"severity": "error",
"message": "Backup upload failed.",
"details": {},
"first_at": "2023-11-07T05:31:56Z",
"last_at": "2023-11-07T05:31:56Z",
"occurrences": 1
}
],
"id": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
"crn": "crn:certificate::my-account:certificate/prod-frontend",
"name": "prod-frontend",
"domains": [
"example.com",
"www.example.com",
"api.example.com"
],
"status": "active",
"source": "acme",
"key_algorithm": "ecdsa-p256",
"challenges": [
{
"faults": [
{
"code": "BACKUP_FAILED",
"severity": "error",
"message": "Backup upload failed.",
"details": {},
"first_at": "2023-11-07T05:31:56Z",
"last_at": "2023-11-07T05:31:56Z",
"occurrences": 1
}
],
"domain": "*.example.com",
"cname_record_name": "_acme-challenge.example.com.",
"expected_cname": "a1b2c3d4e5f6g7h8.acme.basaltic.cloud.",
"our_dns": true,
"verified": true,
"verified_at": "2026-01-15T09:28:00Z"
}
],
"certificate_pem": "-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n",
"chain_pem": "-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n",
"fingerprint": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2",
"issued_at": "2026-01-15T09:30:00Z",
"expires_at": "2026-04-15T09:30:00Z",
"tags": {
"environment": "production",
"team": "backend"
}
}
}{
"error": {
"code": "INVALID_INPUT",
"message": "Invalid request parameters",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "UNAUTHORIZED",
"message": "Authentication required",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "ACCESS_DENIED",
"message": "You don't have permission to perform this action",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "INVALID_INPUT",
"message": "Invalid request parameters",
"request_id": "550e8400-e29b-41d4-a716-446655440000",
"params": {
"instances": 2,
"pools": 0
}
}
}{
"error": {
"code": "IDEMPOTENCY_KEY_REUSED",
"message": "This Idempotency-Key was already used with a different request payload",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}{
"error": {
"code": "INTERNAL_ERROR",
"message": "An internal error occurred",
"request_id": "550e8400-e29b-41d4-a716-446655440000"
}
}Requer a ação do IAM
certificate:CreateCertificate. Consulte permissões de certificados para obter a lista completa, o que cada uma cobre e um exemplo de política.Autorizações
Um token bearer OAuth 2.0, enviado como Authorization: Bearer <token>. Esta é a forma recomendada de autenticação.
Obtenha o token trocando o par de chaves de acesso de uma conta de serviço em POST /v1/oauth/token com grant_type=client_credentials. Esse é o fluxo padrão de credenciais de cliente; bibliotecas compatíveis com OAuth podem obter e renovar o token para você.
curl -s -u "$KEY_ID:$SECRET" -d grant_type=client_credentials \
https://iam.basaltic.sh/v1/oauth/token
Os tokens duram uma hora por padrão. O mesmo par de chaves de acesso também serve como credencial AWS SigV4 para o endpoint de objetos compatível com S3, que aceita somente esse método de autenticação.
Cabeçalhos
Chave opcional gerada pelo cliente que torna uma criação segura para reprodução. A reintentar uma solicitação com a mesma chave retorna o resultado original literalmente em vez de criar um recurso duplicado. A reutilização de uma chave com um corpo de solicitação diferente é rejeitada (422); uma solicitação cuja chave ainda está sendo processada retorna 409. Os registros são honrados por 24 horas. Use um UUID ou token exclusivo semelhante.
Maximum string length:
255Corpo
application/json
Único por conta. Surfaces no CRN (crn:certificate::<account>:certificate/<name>), então ele deve ser seguro para URLs — letras, dígitos, ponto, traço, sublinhado. Os nomes de recursos não devem começar com o prefixo literal crn: ou ser UUIDs (formas canônicas, compactas, entre colchetes ou urn:uuid:, em qualquer caso).
Pattern:
^[a-zA-Z0-9][a-zA-Z0-9._-]{0,253}$Exemplo:
"prod-frontend"
Limitado a 100 para ficar dentro dos limites por pedido da autoridade de certificação.
Required array length:
1 - 100 elementsExemplo:
[
"example.com",
"www.example.com",
"api.example.com"
]
Opções disponíveis:
ecdsa-p256, ecdsa-p384, rsa-2048, rsa-4096 Padrões para "acme" — emitido pela CA da plataforma. Defina para "uploaded" para armazenar material PEM fornecido pelo cliente; certificate_pem + private_key_pem deve ser fornecido.
Opções disponíveis:
acme, uploaded Exemplo:
"acme"
Certificado de folha codificado por PEM. Necessário quando source=uploaded.
Exemplo:
"-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAaH...\n-----END CERTIFICATE-----\n"
Cadeia intermediária codificada em PEM (opcional quando source=uploaded).
Exemplo:
"-----BEGIN CERTIFICATE-----\nMIIEFzCCAv+gAwIBAgIEBb2...\n-----END CERTIFICATE-----\n"
Chave privada codificada por PEM. Necessário quando source=uploaded.
Exemplo:
"-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEG...\n-----END PRIVATE KEY-----\n"
Show child attributes
Show child attributes
Exemplo:
{
"environment": "production",
"team": "backend"
}
Resposta
Certificado carregado armazenado (source=uploaded)
Show child attributes
Show child attributes