ITAM / SSL

How to Add an SSL Certificate

Pull live certificate data into WorkVerge so expiry tracking starts before app.workverge.ai goes to production.

Real-world scenario

Carlos Reyes · IT Admin at Bluewave Labs

app.workverge.ai just got its first Let's Encrypt cert on staging. Carlos opens the domain in WorkVerge, clicks Fetch SSL, and sees expires-on 2026-06-17, nine days before launch. He renews early and re-fetches.

Before you begin

  • ITAM license enabled
  • Domain reachable over HTTPS (for Fetch SSL)
  • Domain record in WorkVerge (recommended) or standalone add via API

Overview

You do not type issuer and expiry by hand. WorkVerge reads them from the live certificate. The usual path is Fetch SSL on a domain you already track. Use the API when onboarding many hostnames from a script or CI pipeline.

Via Fetch SSL

  1. 1

    Open ITAM → Digital Assets → Domains

    Find the hostname the certificate covers, e.g. app.workverge.ai.

  2. 2

    Open the domain detail drawer

    Click View or Edit from the row actions.

  3. 3

    Go to the SSL Info tab

    If no cert is linked yet, you will see an empty state with Fetch SSL.

  4. 4

    Click Fetch SSL

    WorkVerge connects to the domain, reads the live certificate, and creates or updates the SSL record. Issuer and expiry dates fill in automatically.

  5. 5

    Confirm in ITAM → SSL list

    The new cert appears with issued-on and expires-on dates. Edit auto-renew or price if needed.

Via API

For programmatic adds, POST to the SSL assets endpoint with the domain name. WorkVerge auto-fetches certificate metadata. If the domain exists in your org, the SSL links to it automatically.

  1. 1

    POST to the SSL assets API with the domain name

    Use your org API key. WorkVerge fetches the certificate from the live domain.

  2. 2

    Set status (Active, Inactive, or Archived)

    Active for production certs you are tracking for expiry.

  3. 3

    Optionally pass price and currency

    WorkVerge converts to org currency using the issue date when provided.

Required (API): domain name (unique per org), status

Optional: price, currency, description

Example

app.workverge.ai before launch

Carlos opens domain app.workverge.ai, SSL Info tab → Fetch SSL. WorkVerge records:
  • Issuer: Let's Encrypt
  • Issued on: 2026-03-19
  • Expires on: 2026-06-17
He sets Auto-renew on in Edit SSL and adds a calendar reminder anyway. Fetch SSL again after renewal to refresh dates.

Domain link

Certs fetched from domain detail stay linked to that domain. Standalone API adds link when the domain name matches an existing domain record.

Related articles