List SSL certificates in a project.

GET

/v1/projects/{projectId}/lb/ssl-certificates

Code sample: Shell / cURL

curl --request GET \
  --url 'https://stratum.example.com/v1/projects/example/lb/ssl-certificates?limit=100' \
  --header 'Authorization: Bearer <token>'

• A Stratum cluster endpoint.

Cursor-paginated. Ordered created_at DESC, id DESC.

created_at ties freely, so id is the tiebreaker; newest first. Without a unique tiebreaker a cursor sitting on a tie repeats or skips a row.

When nextPageToken is present there are more rows; pass it back as page_token. A token that cannot be parsed is treated as no token, so a client gets the first page rather than a 400.

This endpoint returned every matching row with no limit of any kind until .

Authorizations

• bearerAuth

Parameters

Path Parameters

projectId

required

string

/^p-[a-z0-9-]+$/

Query Parameters

limit

integer

default: 100 >= 1 <= 500

page_token

string

Opaque cursor from a previous response’s nextPageToken. Omit for the first page.

Responses

200

Certificates.

Media typeapplication/json

object

items

required

Array<object>

An SSL/TLS certificate for HTTPS listeners. Only metadata is returned; the cert + key material lives in OpenBao and is never surfaced over the API.

object

id

required

string

/^cert-[a-z0-9]+$/

projectId

required

string

name

required

string

issuer

required

How the certificate was obtained (uploaded vs ACME-issued).

string

Allowed values: manual acme

domainNames

required

The SNI match set (SANs, or the common name).

Array<string>

notBefore

string format: date-time

notAfter

string format: date-time

state

required

string

autoRenew

Whether Stratum renews this certificate automatically before expiry. True for ACME-issued certs (the leader sweep re-obtains them); false for uploaded (manual) certs, which the operator must rotate themselves.

boolean

renewsAt

When an auto-renewing certificate becomes due for renewal — one renewal window (30d) before notAfter. Present only for ACME certs with a known validity; absent for manual certs.

string format: date-time

createdAt

required

string format: date-time

updatedAt

string format: date-time

createdBy

string

nextPageToken

string

Example

{
  "items": [
    {
      "issuer": "manual"
    }
  ]
}