Skip to content

Knowledgebase

Issue and verify a branded domain registration certificate

domain-nexus, development

A Domain Nexus registration certificate presents the platform's recorded domain registration facts under the host's or an authorised reseller's brand. It is separate from an SSL/TLS certificate and should not be represented as a registry-issued legal title document.

01 Read or issue the certificate

Method Resource Scope Idempotency-Key
GET /v2/domains/{domainId}/certificate domains:read Not required by this route
POST /v2/domains/{domainId}/certificate domains:read Required
GET /v2/certificates/{code} domains:read Not required by this route
  1. Read the owned domain and confirm it is active with the correct registration and expiry facts.
  2. GET its certificate for the standard presentation, or POST the permitted issuer and registrant fields for your branded certificate.
  3. When using your connector's own HTTPS verification page, pass its approved verify_url. The platform appends the certificate code to that page's URL.
  4. Store the relevant code and certificate reference with your customer record. Display the returned html through the intended certificate/print workflow.
  5. Test the verification page and confirm the facts it retrieves through the API.

How should public verification work?

A visitor follows the QR code or verification link to your public page. Your server calls the current verification API with its authorised credential and displays the returned status and facts. Keep API secrets on the server; do not embed them in a QR code, public page source or browser request.

The verification code consists of sixteen hexadecimal characters, with or without its printed dashes. The response distinguishes valid, revoked and unknown certificates. An unknown code has no verified facts. Only certificates issued by this platform can be verified through this route.

Why is the issue date not today's print date?

The certificate's issued_on describes the registration date being certified. The first-print timestamp is recorded separately as first_issued_at. Reprinting the same registration facts is not a new domain registration.

Does the certificate prove my website is secure?

No. HTTPS and SSL/TLS validation are independent. Likewise, review domain ownership and registry records through the appropriate account and registration-data workflows. A branded certificate is useful presentation and platform verification evidence, not a substitute for those checks.

Was this answer helpful?

Need a little more help?

Our support team can help you find the next step.

Contact support