# List SSL certificates of a web hosting package

> The SSL certificates of a web hosting package, with the websites that use them.

- Effect: Read - Changes nothing.
- Idempotent: yes
- Stability: beta
- MCP tool: `manitu_webhosting_web_certificate_list` on https://mcp.manitu.de/mcp
- REST: `POST https://api.manitu.de/v1/webhosting/web/certificate/list`
- Needs: `service_webhosting`
- Page: /reference/webhosting/web/certificate/list/

## MCP tool

`manitu_webhosting_web_certificate_list`

### Description for the model

Lists the SSL certificates of a web hosting package of the manitu customer account this connection works in, by its site_id from manitu_webhosting_list: for each the name it is issued for, letsencrypt or custom, active or pending, when it was issued and runs out, and the websites that use it. A website gets or loses one with manitu_webhosting_web_vhost_set (certificate).

### Arguments

- `site_id` (integer | string, required) - The site_id from manitu_webhosting_list - never guess one. (pattern `"^[1-9][0-9]*$"`; minimum `1`)

### Example

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "manitu_webhosting_web_certificate_list",
    "arguments": {
      "site_id": 12345
    }
  }
}
```

## REST

`POST https://api.manitu.de/v1/webhosting/web/certificate/list`

### Authentication

One of `X-API-Key`, `Authorization: Bearer …` - never more than one in a request.

### Request body

JSON; unknown fields are refused.

- `site_id` (integer | string, required) - The site_id from manitu_webhosting_list - never guess one. (pattern `"^[1-9][0-9]*$"`; minimum `1`)

### Response

In `data`; the rest of the body as on every call.

- `certificate_list` (array of object, required)
  - `certificate_list[].certificate_id` (integer, required) - Its key.
  - `certificate_list[].type` (string, required) - letsencrypt: added and renewed by manitu; custom: uploaded by the customer in the customer panel. (one of `"letsencrypt"`, `"custom"`)
  - `certificate_list[].status` (string, required) - active: issued; pending: asked for, Let's Encrypt usually within an hour. (one of `"active"`, `"pending"`)
  - `certificate_list[].fqdn` (string, required) - The name it is issued for.
  - `certificate_list[].fqdn_ascii` (string, required) - The same in ASCII.
  - `certificate_list[].issued_at` (string | null, required) - When it was issued; null while pending. (format `date-time`)
  - `certificate_list[].expires_at` (string | null, required) - When it runs out - Let's Encrypt renews in time; null while pending. (format `date-time`)
  - `certificate_list[].used_by_list` (array of string, required) - The websites (fqdn) that use it.

### Statuses

- `200` Success.
- `400` The request does not match the declared input schema.
- `401` No credential was presented, or it was not recognised.
- `403` The credential is not permitted to use this operation.
- `500` The server failed. Nothing about the request was wrong. Whether a change took effect is not known - check before trying it again.
- `503` The channel this operation forwards through is unavailable.

### Example

```sh
curl -X POST 'https://api.manitu.de/v1/webhosting/web/certificate/list' \
  -H 'X-API-Key: $API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"site_id":12345}'
```

## Example result

```json
{
  "certificate_list": [
    {
      "certificate_id": 12345,
      "type": "letsencrypt",
      "status": "active",
      "fqdn": "example.com",
      "fqdn_ascii": "string",
      "issued_at": "2026-10-23T12:00:00+02:00",
      "expires_at": "2026-10-23T12:00:00+02:00",
      "used_by_list": [
        "string"
      ]
    }
  ]
}
```