List a listener's SNI certificates.

GET

/v1/projects/{projectId}/lb/listeners/{listenerId}/certificates

Code sample: Shell / cURL

curl --request GET \
  --url https://stratum.example.com/v1/projects/example/lb/listeners/example/certificates \
  --header 'Authorization: Bearer <token>'

• A Stratum cluster endpoint.

Authorizations

• bearerAuth

Parameters

Path Parameters

projectId

required

string

/^p-[a-z0-9-]+$/

listenerId

required

string

/^lis-[a-z0-9]+$/

Responses

200

Certificates in SNI order.

Media typeapplication/json

object

items

required

Array<object>

An SSL/TLS certificate for HTTPS listeners. Only metadata is returned; the cert + key material lives in OpenBao and is never surfaced over the API.

object

id

required

string

/^cert-[a-z0-9]+$/

projectId

required

string

name

required

string

issuer

required

How the certificate was obtained (uploaded vs ACME-issued).

string

Allowed values: manual acme

domainNames

required

The SNI match set (SANs, or the common name).

Array<string>

notBefore

string format: date-time

notAfter

string format: date-time

state

required

string

autoRenew

Whether Stratum renews this certificate automatically before expiry. True for ACME-issued certs (the leader sweep re-obtains them); false for uploaded (manual) certs, which the operator must rotate themselves.

boolean

renewsAt

When an auto-renewing certificate becomes due for renewal — one renewal window (30d) before notAfter. Present only for ACME certs with a known validity; absent for manual certs.

string format: date-time

createdAt

required

string format: date-time

updatedAt

string format: date-time

createdBy

string

nextPageToken

string

Example

{
  "items": [
    {
      "issuer": "manual"
    }
  ]
}