Certificates

If you want to use a custom certificate instead of the auto-generated Let's Encrypt one, you can use the create command:

 
kraft cloud cert create \
  --cn *.mydomain.com \
  --name mydomain-cert \
  --pkey /path/to/private.key \
  --chain /path/to/chain.pem

The provided common name (CN) must match the one for which the certificate has been issued. As shown in the example, this can also be a wildcard domain.

To see and manage your certificates you can use the kraft cloud cert command. For instance, to list your certificate, run:

To see and manage your certificates you can use the kraft cloud cert command. For instance, to list your certificate, run:

 
kraft cloud cert ls

You should see output similar to:

 
NAME                           STATE  COMMON NAME              CREATED AT
mydomain.com-sa4x9             valid  mydomain.com             5 days ago
mydomain-cert                  valid  *.mydomain.com           2 days ago

You can also retrieve full information about your certificate via

 
kraft cloud cert get mydomain.com-sa4x9

You should see output similar to:

 
                uuid: b8160db9-7cba-4b80-9107-c4fe27529bf5
                name: mydomain.com-sa4x9
               state: valid
         common name: mydomain.com
             subject: CN=mydomain.com
              issuer: CN=R3,O=Let's Encrypt,C=US
       serial number: 0455BBAEC140EACBA5FEEAE6D817E73EF266
          not before: 2024-03-07T18:06:11Z
           not after: 2024-06-05T18:06:10Z
          created at: 2024-03-07T19:06:04Z
            services: wispy-moon-dpg6d54i

Finally, if you want to remove the certificate, first make sure you (1) remove any instances from the relevant service and (2) remove the service. After that you can remove the actual certificate with:

 
kraft cloud cert rm mydomain.com-sa4x9

Learn More

• The kraft cloud CLI reference
• Unikraft Cloud's REST API reference
• Many more guides here