Everything the platform automates
Issuance, ACME validation, renewals, webhooks, API keys, and inventory — the features sslcertificates.io actually ships today.
Issuance API
Request a DV certificate for one hostname, a SAN set, or a wildcard through a single REST call. The platform stores the order, identifiers, challenges, and resulting certificate metadata in your organization — not as a shopping-cart checkout.
Validation
HTTP-01 and DNS-01 are first-class. Manual DNS records are returned on the order so you can publish them yourself. Cloudflare DNS automation is available when you supply your own API token. Wildcard names require DNS-01.
Renewals and revocation
Active certificates with auto-renew enabled are scheduled before expiry. You can force a test renewal from the API or dashboard. Revocation marks the certificate revoked, writes an audit event, and notifies subscribed webhooks.
Developer controls
Organization-scoped API keys with abilities, HMAC-signed webhooks with retries, idempotency keys, rate limits, and an audit log. Private keys stay encrypted at rest when the platform generates them. Customer CSR mode never stores a private key we did not create.