# v2 (https://developer.godaddy.com/en/docs/references/rest/certificates/v2)

***

title: v2
description: ''
full: true
\_openapi:
preload:

* ./openapi-specs/specs/external/certificates.yaml
  toc:
* depth: 2
  title: Search for certificate details by entitlement
  url: '#search-for-certificate-details-by-entitlement'
* depth: 2
  title: Create a pending order for certificate
  url: '#create-a-pending-order-for-certificate'
* depth: 2
  title: Reissue active certificate
  url: '#reissue-active-certificate'
* depth: 2
  title: Download certificate by entitlement
  url: '#download-certificate-by-entitlement'
* depth: 2
  title: Retrieve customer's certificates
  url: '#retrieve-customers-certificates'
* depth: 2
  title: Retrieve individual certificate details
  url: '#retrieve-individual-certificate-details'
* depth: 2
  title: Retrieve domain verification status
  url: '#retrieve-domain-verification-status'
* depth: 2
  title: Retrieve detailed information for supplied domain
  url: '#retrieve-detailed-information-for-supplied-domain'
* depth: 2
  title: Retrieves the external account binding for the specified customer
  url: '#retrieves-the-external-account-binding-for-the-specified-customer'
* depth: 2
  title: Get a page of subscriptions by domain
  url: '#get-a-page-of-subscriptions-by-domain'
* depth: 2
  title: GET a page of certificates for a specific domain product
  url: '#get-a-page-of-certificates-for-a-specific-domain-product'
  structuredData:
  headings:
  * content: Search for certificate details by entitlement
    id: search-for-certificate-details-by-entitlement
  * content: Create a pending order for certificate
    id: create-a-pending-order-for-certificate
  * content: Reissue active certificate
    id: reissue-active-certificate
  * content: Download certificate by entitlement
    id: download-certificate-by-entitlement
  * content: Retrieve customer's certificates
    id: retrieve-customers-certificates
  * content: Retrieve individual certificate details
    id: retrieve-individual-certificate-details
  * content: Retrieve domain verification status
    id: retrieve-domain-verification-status
  * content: Retrieve detailed information for supplied domain
    id: retrieve-detailed-information-for-supplied-domain
  * content: Retrieves the external account binding for the specified customer
    id: retrieves-the-external-account-binding-for-the-specified-customer
  * content: Get a page of subscriptions by domain
    id: get-a-page-of-subscriptions-by-domain
  * content: GET a page of certificates for a specific domain product
    id: get-a-page-of-certificates-for-a-specific-domain-product
    contents:
  * content: Once the certificate order has been created, this method can be used to
    check the status of the certificate. This method can also be used to
    retrieve details of the certificates associated to an entitlement.
    heading: search-for-certificate-details-by-entitlement
  * content: "Creating a certificate order for a subscription can be a long
    running asynchronous operation in the PKI workflow. The PKI API
    supports 2 options for getting the completion stateful actions for
    this asynchronous operations: 1) by polling operations -- see
    /v1/certificates//actions 2) via WebHook style callback
    \-- see '/v1/certificates//callback'."
    heading: create-a-pending-order-for-certificate
  * content: Rekeying is the process by which the private and public key is
    changed for a certificate. It is a simplified reissue,where only the
    CSR is changed. Reissue extends validity of the existing certificate
    by requesting a new certificate with all the same values as existing
    issued certificate. Once a request is validated and approved, the
    certificate will be reissued with the same common name and sans
    specified from existing certificate. Unlimited reissues are available
    during the lifetime of the certificate.If this API call is made before
    a previous pending reissue has been validated and issued, the previous
    reissue request is automatically rejected and replaced with the
    current request.
    heading: reissue-active-certificate
  * content: This method can be used to retrieve a list of certificates for a
    specified customer. **shopperId** is **not the same** as
    **customerId**.  **shopperId** is a number of max length 10 digits
    (*ex:* 1234567890) whereas **customerId** is a UUIDv4 (*ex:*
    295e3bc3-b3b9-4d95-aae5-ede41a994d13)
    heading: retrieve-customers-certificates
  * content: Once the certificate order has been created, this method can be used to
    check the status of the certificate. This method can also be used to
    retrieve details of the certificate. **shopperId** is **not
    the same** as **customerId**. **shopperId** is a number of max length
    10 digits (*ex:* 1234567890) whereas **customerId** is a UUIDv4 (*ex:*
    295e3bc3-b3b9-4d95-aae5-ede41a994d13)
    heading: retrieve-individual-certificate-details
  * content: This method can be used to retrieve the domain verification status for
    a certificate request.**shopperId** is **not the same** as
    **customerId**.  **shopperId** is a number of max length 10 digits
    (*ex:* 1234567890) whereas **customerId** is a UUIDv4 (*ex:*
    295e3bc3-b3b9-4d95-aae5-ede41a994d13)"
    heading: retrieve-domain-verification-status
  * content: Retrieve detailed information for supplied domain, including domain
    verification details and Certificate Authority Authorization (CAA)
    verification details. **shopperId** is **not the same** as
    **customerId**.  **shopperId** is a number of max length 10 digits
    (*ex:* 1234567890) whereas **customerId** is a UUIDv4 (*ex:*
    295e3bc3-b3b9-4d95-aae5-ede41a994d13)
    heading: retrieve-detailed-information-for-supplied-domain
  * content: Use this endpoint to retrieve a key identifier and Hash-based Message
    Authentication Code (HMAC) key for Automated Certificate Management
    Environment (ACME) External Account Binding (EAB). These credentials
    can be used with an ACME client that supports EAB (ex. CertBot) to
    automate the issuance request and deployment of DV SSL certificates
    heading: retrieves-the-external-account-binding-for-the-specified-customer
  * content: The pagination starts at page 1. Each page contains a page of
    *subscriptions*, not certificates. This endpoint is meant for paging
    the subscriptions under the authorized user's account. Each
    subscription contains a snapshot of certificates contained within the
    subscription. To fetch further certificates under a subscription, use
    the /v2/certificates/subscription/ endpoint with the
    subscription GUID obtained from this call. If any filtering is
    applied, subscriptions without any certificates will be omitted.
    heading: get-a-page-of-subscriptions-by-domain

***