Certificates

The Certificates page lets you view all SSL/TLS certificates issued by your certificate authorities. It has two tabs: Certificates showing all issued certificates and Expiring soon showing certificates approaching expiration.

Certificates list

Navigate to Operation → Private SSL → Certificates to view all issued certificates.

Certificates tab

This tab shows all certificates issued by your CAs.

The list shows:

• Name: Common name with status badge
• Authority: The CA that issued the certificate
• Valid for: Certificate validity period
• Signed by: Who signed the certificate
• Signed at: When the certificate was signed
• Expires at: Expiration date
• Revoked at: When revoked (if applicable)

Expiring soon tab

This tab shows certificates approaching expiration.

The list shows:

• Name: Common name with status badge
• Authority: The CA that issued the certificate
• Valid for: Certificate validity period
• Signed by: Who signed the certificate
• Signed at: When the certificate was signed
• Expires at: Expiration date

Certificate detail page

Click on a certificate to view its details:

Information displayed:

• Common name
• Authority (CA)
• Status
• Valid for (validity period in days)
• Signed by
• Signed at
• Expires at
• Serial number
• Revocation status and date (if applicable)
• CRT text

Available actions:

• Revoke: Create a revocation request

Downloading certificates

From the web interface

The certificate detail page displays the CRT text directly. You can copy the certificate content from the detail page.

From the CLI

Download a certificate:

alpacon cert download CERT_ID -o certificate.crt

List all certificates:

alpacon cert ls

View certificate details:

alpacon cert describe CERT_ID

Certificate statuses

Monitoring expiration

Use the Expiring soon tab to monitor certificates approaching expiration:

1. Go to Certificates → Expiring soon
2. Review certificates that need renewal

Renewal workflow

To renew an expiring certificate:

1. Note the SANs and settings from the expiring certificate
2. Create a new sign request with the same configuration
3. After approval, download and deploy the new certificate
4. Optionally revoke the old certificate

Revoking certificates

To revoke a certificate:

1. Click on the certificate
2. Click Revoke
3. Select a revocation reason
4. Submit the request for approval

See Requests for more information on revocation workflows.

CLI commands

Related topics

• Requests - Create sign and revoke requests
• Authorities - Manage certificate authorities
• CLI reference: alpacon cert - Full command reference