Connect securely. Grow together.Automate your SSL workflows with the API
API DOCUMENTATION

From your first request
to a working integration.

Start with product listing. Set up authentication and manage your SSL processes from your own server.

01 / CONNECTION

Authentication

Base URL: https://api.sslcipher.com/api/v1

  1. Create a key from the API Keys section in the reseller panel.
  2. Add your integration server’s outbound IP address to the key’s allowlist.
  3. Send the X-Api-Key and X-Api-Secret headers together with every request.
  4. Add the Accept: application/json header for JSON responses.

Keep your secret key only in server environment variables or a secure secrets store. Never add it to browser code, public repositories or log files.

02 / SAMPLE REQUEST

List products

This read-only request returns the products available to your account. Without your key and IP allowlisting, you won’t get an authorized response.

curl 'https://api.sslcipher.com/api/v1/products' \
  -H "Accept: application/json" \
  -H "X-Api-Key: $SSLCIPHER_API_KEY" \
  -H "X-Api-Secret: $SSLCIPHER_API_SECRET"
REST API JSON response · IP access control

Response structure

The product list response contains an data array. Each product includes id, name, brand, type, is_wildcard, is_multi_domain, max_san fields and an price field calculated for your account. Check the current product details before creating an order.

03 / OPERATIONS

Core endpoints

MethodPathAction
GET/productsList products
GET/products/{id}Product and pricing options
GET/ordersList orders
POST/ordersCreate order
GET/orders/{id}Get order details
GET/orders/{id}/statusGet order status
POST/orders/{id}/verifyCheck validation
POST/orders/{id}/dcvChange validation method
POST/orders/{id}/reissueRequest reissue
GET/orders/{id}/download/zipDownload certificate archive

Paths are relative to the base URL. The fields required for write operations depend on the product and the operation’s status. Confirm the field schemas for order integration with our support team; this page is a getting-started guide.

04 / RESPONSES

Handle errors explicitly

401 UnauthorizedCheck that the key and secret are valid.
403 Access deniedConfirm the server is on the IP allowlist.
422 Validation errorReview the request fields and the returned error messages.
429 Rate limitReduce your request rate and apply controlled retries.

Don’t blindly retry write operations like orders after a network error. Check first whether the operation went through; otherwise you risk creating duplicate operations.