certs
List the certificates available to the Rack. Shows each certificate's ID, domain, and expiration date. Use this to audit which certificates are available before associating them with App endpoints.
The list covers IAM server certificates in the Rack's AWS account, listed by name, and ACM certificates in the Rack's region, listed as acm- followed by the last 12 characters of the certificate ARN. It is not limited to certificates this Rack created. Only ACM certificates with the status ISSUED are listed, so a certificate still waiting for validation does not appear until ACM issues it, and an expired ACM certificate is not shown. Certificates Convox creates for Service domains are not listed.
ACM certificates of every key type are listed: RSA 1024, 2048, 3072 and 4096 bits, and ECDSA P-256, P-384 and P-521. Listing ECDSA and 3072-bit or 4096-bit RSA certificates requires rack version 20261005214736 or newer; older racks list only RSA 1024-bit and 2048-bit ACM certificates. A Service domain: uses only RSA 1024-bit and 2048-bit certificates; see certs import for the key types each load balancer accepts.
An IAM certificate named cert-<rack>-<unix time>-<number> is the self-signed certificate the Rack uploads for Gen 1 https and tls ports that have no certificate applied.
Syntax
$ convox certs
Flags
| Flag | Short | Description |
|---|---|---|
--rack |
-r |
Rack name |
Example Usage
$ convox certs
ID DOMAIN EXPIRES
acm-3f9d27c1b6a4 *.example.com 6 months from now
acm-74ec8b405093 example.com 1 year from now
cert-production-1758802512-04821 *.*.elb.amazonaws.com 5 days ago
See Also
