Skip to content
Bitelex Docs

Certificates

Zone certificates are TLS certificates for names in your zones, served by Dinio’s edge. See DNS hosting.

Terminal window
dinio cert add   --zone example.com fullchain.pem privkey.pem
dinio cert list  --zone example.com
dinio cert show  www.example.com
dinio cert renew www.example.com fullchain.pem privkey.pem
dinio cert rm    www.example.com

CERT is the certificate’s uuid, or a host name it covers (www.example.com, also through a wildcard).

Command
cert list [--zone ZONE] Certificates of your zones: names, valid until, source, zone, uuid.
cert show CERT One certificate: names, subject, issuer, validity, key type, fingerprint.
cert add --zone ZONE CHAIN KEY Upload a certificate from PEM files: the chain (leaf first, then intermediates) and the private key.
cert renew CERT CHAIN KEY Replace a certificate with a renewed one, under the same uuid.
cert rm CERT Delete a certificate. Asks for confirmation.

Every name on the certificate must be in the zone, and a name can have only one certificate: to replace one, use renew, not add. The key is read from the file and sent once. The CLI never prints it, and Dinio never returns it.

Certificates that Dinio issues for a redirect with --tls auto are listed with source Acme (redirect). renew and rm refuse them and tell you to switch the redirect to --tls manual first; see Redirects.