---
title: "Platform operators: every certificate order"
method: GET
path: "/operator/certificates/orders"
tags: ["Certificates"]
---

# Platform operators: every certificate order

`GET /operator/certificates/orders`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/operator/certificates/orders`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Query parameters

- `limit` integer
- `offset` integer, nullable
- `state` 'draft' | 'awaiting_payment' | 'paid' | 'pending_validation' | 'issued' | 'installed' | 'canceled' | 'refunded' | 'failed' | 'expired'

## Response `200`

Orders

- object
  - `items` object[], required
    - `id` string, uuid, required
    - `organizationId` string, uuid, required
    - `organizationName` string, required
    - `productName` string, required
    - `provider` string, required
    - `validation` 'dv' | 'ov' | 'ev', required
    - `names` string[], required
    - `amount` integer, required
    - `currency` string, required
    - `state` 'draft' | 'awaiting_payment' | 'paid' | 'pending_validation' | 'issued' | 'installed' | 'canceled' | 'refunded' | 'failed' | 'expired', required
    - `paymentStatus` string, required
    - `paidVia` string, nullable, required
    - `providerOrderId` string, nullable, required
    - `providerStatus` string, nullable, required
    - `lastError` string, nullable, required
    - `createdAt` string, required: ISO-8601 timestamp
    - `updatedAt` string, required: ISO-8601 timestamp
  - `total` integer, required
  - `limit` integer, required
  - `offset` integer, required

## Other responses

- `400`: Invalid request (code invalid_request); details.problems lists every certificate problem
- `401`: Missing or invalid session/token (code unauthorized)
- `403`: Authenticated but not permitted (code forbidden)
- `404`: Not found or not visible to the caller (code not_found)
- `409`: Conflicting state (code conflict)
- `429`: Too many requests (code rate_limited); see Retry-After
- `501`: Not available on this server (code not_configured)
- `503`: Certificate provider unavailable (code provider_unavailable)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)