Delete a revoked or expired certificate

DELETE

/api/certificates/{id}

curl --request DELETE \
  --url https://opfield.example.com/api/certificates/550e8400-e29b-41d4-a716-446655440000 \
  --header 'Authorization: Bearer <token>'

• Your Opfield instance

Deletes a certificate that no longer works: revoked, or past its expiry. A valid certificate is refused with 409 CERT_STILL_VALID (revoke it first). A revoked certificate deleted before it expires stays on its CA’s CRL until then (keptOnCrlUntil). Refused with 409 CERT_IN_USE (details.routes, details.sslCertificates) while a route uses it as internalCertificateId or an SSL certificate is linked from it, and with 403 SYSTEM_CERT for system certificates. Audited as cert.delete. Needs pki:cert:revoke on the certificate; works after the license grace period.

Authorizations

• bearerAuth

Parameters

Path Parameters

id

required

string

>= 1 characters

Example

550e8400-e29b-41d4-a716-446655440000

Responses

200

Successful response

Media typeapplication/json

object

data

required

Resource object. Exact fields depend on the endpoint.

object

id

string

name

string

key

additional properties

Example

{
  "data": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "commonName": "app.example.com",
    "type": "tls-server",
    "status": "active",
    "notAfter": "2025-01-01T00:00:00.000Z"
  }
}

400

Bad request

Media typeapplication/json

object

code

required

Error code

string

message

required

Human-readable error message

string

details

Additional error details

Example

{
  "code": "VALIDATION_ERROR",
  "message": "Request validation failed",
  "details": [
    {
      "path": [
        "name"
      ],
      "message": "Required"
    }
  ]
}

401

Authentication required

Media typeapplication/json

object

code

required

Error code

string

message

required

Human-readable error message

string

details

Additional error details

Example

{
  "code": "UNAUTHORIZED",
  "message": "Authentication required"
}

403

Forbidden

Media typeapplication/json

object

code

required

Error code

string

message

required

Human-readable error message

string

details

Additional error details

Example

{
  "code": "FORBIDDEN",
  "message": "Insufficient permissions"
}

404

Not found

Media typeapplication/json

object

code

required

Error code

string

message

required

Human-readable error message

string

details

Additional error details

Example

{
  "code": "NOT_FOUND",
  "message": "Resource not found"
}

409

Conflict

Media typeapplication/json

object

code

required

Error code

string

message

required

Human-readable error message

string

details

Additional error details

Example

{
  "code": "CONFLICT",
  "message": "Resource already exists"
}

422

Unprocessable entity

Media typeapplication/json

object

code

required

Error code

string

message

required

Human-readable error message

string

details

Additional error details

Example

{
  "code": "UNPROCESSABLE_ENTITY",
  "message": "Request could not be processed"
}

500

Internal server error

Media typeapplication/json

object

code

required

Error code

string

message

required

Human-readable error message

string

details

Additional error details

Example

{
  "code": "INTERNAL_ERROR",
  "message": "Internal server error"
}