Certificate for a specific hostname. The backend returns a union: the
PEM bundle fields (certificatePem/privateKey/caBundle) when the
certificate is issued, or { certificate } data while pending.
Optionalopts: RequestOptionsAll certificates for an application.
Optionalopts: RequestOptionsRefresh/renew a certificate; returns the updated certificate row and the
backend's CA-order status message when the order is still unresolved
(absent once issued). Callers should prefer the real message over any
synthesized copy so the user sees the actual CA order state.
Optionalopts: RequestOptionsRe-provision a TERMINALLY-FAILED certificate (error / expired): a TRUE
re-issue that reclaims the dead row and starts a fresh CA order — unlike
refresh, which only re-reads the existing order. Use this when a
certificate's DNS-01 / HTTPS-file validation failed and the underlying cause
(DNS propagation, the device serving the token) is now resolved. Returns the
projected status of the reclaimed (freshly pending) certificate. The
backend rejects the call (409) when the certificate is not in a terminal
state.
Optionalopts: RequestOptions
sdk.applications.certificates — TLS certificates for an application's hostnames.