Sign in
Domains

Get on-demand TLS certificate status for a hostname

Returns the current cert lifecycle state for a single hostname (from the domains row) plus the most recent on-demand issuance attempt (from the on_demand_cert_attempts audit log). This is the operator's first-line diagnostic, surfaced by temps domain cert-status (ADR-018 §5). Returns the hostname with None fields when no on-demand activity exists for it (never a 404, so the CLI can render "no attempts recorded").

get/domains/by-host/{hostname}/cert-status

Request

  • Base URL: /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/domains/by-host/{hostname}/cert-status
  • Auth: HTTP bearer

Path parameters

hostnamestring required

Domain hostname

Response

On-demand cert status retrieved successfully

backoff_untilinteger nullable

On-demand negative-cache deadline (epoch millis), when in backoff.

hostnamestring required

SNI hostname.

statusstring nullable

Current cert lifecycle status from the domains row, when one exists.

Changes

No recorded changes to this operation across all 50 revisions of this API.