Issue and monitor a certificate

What does this do for me?

You will request a certificate only after KeylessSSL has verified the domain, then follow its state in the portal.

Request issuance

Open Domains.
Select a domain whose delegation status is Verified and certificate status is None.
Select Issue certificate.

The portal requests a non-wildcard certificate. The API refuses issuance when the domain has not been verified.

Monitor status

Open Certificates.
Find the domain and check its status, issuer, provider, issue date, and expiration date.
If the certificate is pending, use the sync action to read its current state from Cloudflare.

The Domains screen also shows the certificate state, next renewal date, last issue date, and any validation error recorded for the domain.

About certificate downloads

The Certificates screen includes a download action, but the API does not expose PEM bundles or private keys for certificates managed at the Cloudflare edge. A download succeeds only when the certificate record actually contains a stored PEM bundle.