Overview#

Simple SSL Certificate Manager is a streamlined API for automating SSL/TLS certificate lifecycle management. Built for security professionals and DevOps teams, it enables DNS-based domain validation, certificate generation via industry-standard protocols, and secure certificate delivery. The platform handles the complexity of certificate provisioning, allowing you to focus on securing your infrastructure.

This tool is ideal for organizations managing multiple domains, implementing Infrastructure-as-Code practices, or automating certificate renewals across distributed systems. With support for staging environments and flexible email validation, it accommodates both development and production workflows.

The API follows a two-step workflow: first generate DNS challenge records for domain ownership verification, then request certificate generation after DNS records are confirmed in place. Built-in debugging capabilities help troubleshoot DNS configuration issues.

Usage#

DNS Challenge Generation#

First, generate DNS challenge data for domain validation:

json

POST /dns-challenge
Content-Type: application/json

{
  "domain": "example.com",
  "email": "admin@example.com"
}

Sample Response:

json

{
  "domain": "example.com",
  "challenge_token": "abc123xyz789",
  "dns_record_type": "TXT",
  "dns_record_name": "_acme-challenge.example.com",
  "dns_record_value": "abc123xyz789_validation_string",
  "challenge_expires_at": "2025-01-15T14:30:00Z"
}

Certificate Generation#

After DNS records are in place, request certificate generation:

json

POST /generate-certificate
Content-Type: application/json

{
  "domain": "example.com",
  "email": "admin@example.com",
  "confirmed": true,
  "staging": false
}

Sample Response:

json

{
  "certificate_id": "cert_67890abcde",
  "domain": "example.com",
  "status": "issued",
  "issued_at": "2025-01-15T14:35:00Z",
  "expires_at": "2026-01-15T14:35:00Z",
  "certificate_name": "example_com_2025",
  "download_url": "/download/example_com_2025/certificate.pem"
}

Debug DNS Configuration#

Verify DNS setup before certificate generation:

text

GET /debug/example.com

Sample Response:

json

{
  "domain": "example.com",
  "dns_records": [
    {
      "name": "_acme-challenge.example.com",
      "type": "TXT",
      "value": "abc123xyz789_validation_string",
      "status": "verified",
      "ttl": 300
    }
  ],
  "validation_status": "success",
  "checked_at": "2025-01-15T14:33:00Z"
}

Endpoints#

GET /#

Summary: Root

Description: API information and status endpoint.

Parameters: None

Response: Empty JSON object confirming API availability.

---

GET /health#

Summary: Health Check

Description: Verify API service health and readiness.

Parameters: None

Response: Health status confirmation.

---

POST /dns-challenge#

Summary: Create DNS Challenge

Description: Generate DNS challenge data for manual domain ownership verification.

Parameters:

• domain (string, required): The domain name to validate (e.g., example.com)
• email (string, email format, required): Contact email for certificate issuance

Response Shape:

text

{
  "domain": string,
  "challenge_token": string,
  "dns_record_type": string,
  "dns_record_name": string,
  "dns_record_value": string,
  "challenge_expires_at": string (ISO 8601 datetime)
}

---

POST /generate-certificate#

Summary: Generate Certificate

Description: Generate SSL certificate after DNS verification is confirmed.

Parameters:

• domain (string, required): The domain name for certificate issuance
• email (string, email format, required): Contact email for the certificate
• confirmed (boolean, optional, default: false): Set to true after DNS records are verified
• staging (boolean, optional, default: false): Use staging certificates for testing

Response Shape:

text

{
  "certificate_id": string,
  "domain": string,
  "status": string,
  "issued_at": string (ISO 8601 datetime),
  "expires_at": string (ISO 8601 datetime),
  "certificate_name": string,
  "download_url": string
}

---

GET /download/{cert_name}/{filename}#

Summary: Download Certificate

Description: Download generated certificate files (PEM, key, chain).

Parameters:

• cert_name (string, required): Certificate identifier (from generation response)
• filename (string, required): File to download ( certificate.pem, private.key, or chain.pem)

Response: Binary certificate file content or JSON error.

---

GET /debug/{domain}#

Summary: Debug Domain

Description: Inspect DNS configuration and validation status for a domain.

Parameters:

• domain (string, required): Domain name to debug (e.g., example.com)

Response Shape:

text

{
  "domain": string,
  "dns_records": [
    {
      "name": string,
      "type": string,
      "value": string,
      "status": string,
      "ttl": integer
    }
  ],
  "validation_status": string,
  "checked_at": string (ISO 8601 datetime)
}

Pricing#

PlanCalls/DayCalls/MonthPriceFree550FreeDeveloper20500$39/moProfessional2005,000$99/moEnterprise100,0001,000,000$299/mo

About#

ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

• toolweb.in
• portal.toolweb.in
• hub.toolweb.in
• toolweb.in/openclaw/
• rapidapi.com/user/mkrishna477
• youtube.com/@toolweb-009

References#

• Kong Route: https://api.mkkpro.com/security/ssl-certificate-manager
• API Docs: https://api.mkkpro.com:8044/docs