Certificates

The Certificates page lets you view all SSL/TLS certificates issued by your certificate authorities. It has two tabs: Certificates showing all issued certificates and Expiring soon showing certificates approaching expiration.

Certificates list

Navigate to Operation → Private SSL → Certificates to view all issued certificates.

Certificates tab

This tab shows all certificates issued by your CAs.

The list shows:

• Name: Common name with status badge
• Authority: The CA that issued the certificate
• Valid for: Certificate validity period
• Signed by: Who signed the certificate
• Signed at: When the certificate was signed
• Expires at: Expiration date
• Revoked at: When revoked (if applicable)

Expiring soon tab

This tab shows certificates approaching expiration.

The list shows:

• Name: Common name with status badge
• Authority: The CA that issued the certificate
• Valid for: Certificate validity period
• Signed by: Who signed the certificate
• Signed at: When the certificate was signed
• Expires at: Expiration date

Certificate detail page

Click on a certificate to view its details:

Information displayed:

• Authority (CA)
• Status
• Valid for (validity period)
• Signed by
• Signed at
• Expires at
• CSR link
• Revoked at (if applicable)
• CRT text

Available actions:

• Download .crt: shown when the certificate is Valid
• Revoke: create a revocation request (shown when the certificate is Valid and you have permission)

Downloading certificates

From the web interface

When the certificate is Valid, the detail page shows a Download .crt button. The CRT text is also displayed, so you can copy it directly.

From the CLI

Download a certificate:

alpacon cert download CERT_ID -o certificate.crt

List all certificates:

alpacon cert ls

View certificate details:

alpacon cert describe CERT_ID

Certificate statuses

Monitoring expiration

Use the Expiring soon tab to monitor certificates approaching expiration:

1. Go to Certificates → Expiring soon
2. Review certificates that need renewal

Renewal workflow

To renew an expiring certificate:

1. Note the SANs and settings from the expiring certificate
2. Create a new sign request with the same configuration
3. After approval, download and deploy the new certificate
4. Optionally revoke the old certificate

Revoking certificates

Revoking a certificate follows a 3-step wizard:

1. Request — open the certificate, click Revoke, select a revocation reason, and submit.
2. Approval — the request waits for administrator approval. A request made by an administrator is approved automatically.
3. Completed — once approved, the certificate is revoked.

See Requests for more on revocation workflows.

CLI commands

Related topics

• Requests - Create sign and revoke requests
• Authorities - Manage certificate authorities
• CLI reference: alpacon cert - Full command reference