
Company News
Socket Named Top Sales Organization by RepVue
Socket won two 2026 Reppy Awards from RepVue, ranking in the top 5% of all sales orgs. AE Alexandra Lister shares what it's like to grow a sales career here.
@heroku-cli/plugin-certs-v5
Advanced tools
heroku certsheroku certs:add CRT KEYheroku certs:autoheroku certs:auto:disableheroku certs:auto:enableheroku certs:auto:refreshheroku certs:chainheroku certs:generate DOMAINheroku certs:infoheroku certs:keyheroku certs:removeheroku certs:update CRT KEYheroku certslist SSL certificates for an app
USAGE
$ heroku certs -a <value> [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
DESCRIPTION
list SSL certificates for an app
See code: commands/certs/index.js
heroku certs:add CRT KEYadd an SSL certificate to an app
USAGE
$ heroku certs:add CRT KEY -a <value> [--bypass] [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
--bypass bypass the trust chain completion step
DESCRIPTION
add an SSL certificate to an app
Note: certificates with PEM encoding are also valid
EXAMPLES
$ heroku certs:add example.com.crt example.com.key
If you require intermediate certificates, refer to this article on merging certificates to get a complete chain:
https://help.salesforce.com/s/articleView?id=000333504&type=1
See code: commands/certs/add.js
heroku certs:autoshow ACM status for an app
USAGE
$ heroku certs:auto -a <value> [--wait] [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
--wait watch ACM status and display the status when complete
DESCRIPTION
show ACM status for an app
See code: commands/certs/auto/index.js
heroku certs:auto:disabledisable ACM for an app
USAGE
$ heroku certs:auto:disable -a <value> [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
DESCRIPTION
disable ACM for an app
See code: commands/certs/auto/disable.js
heroku certs:auto:enableenable ACM status for an app
USAGE
$ heroku certs:auto:enable -a <value> [--wait] [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
--wait watch ACM status and exit when complete
DESCRIPTION
enable ACM status for an app
See code: commands/certs/auto/enable.js
heroku certs:auto:refreshrefresh ACM for an app
USAGE
$ heroku certs:auto:refresh -a <value> [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
DESCRIPTION
refresh ACM for an app
See code: commands/certs/auto/refresh.js
heroku certs:chainprint an ordered & complete chain for a certificate
USAGE
$ heroku certs:chain -a <value> [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
DESCRIPTION
print an ordered & complete chain for a certificate
See code: commands/certs/chain.js
generate a key and a CSR or self-signed certificate
USAGE
$ heroku certs:generate DOMAIN -a <value> [--selfsigned] [--keysize <value>] [--owner <value>] [--country <value>]
[--area <value>] [--city <value>] [--subject <value>] [--now] [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
--area=<value> sub-country area (state, province, etc.) of owner
--city=<value> city of owner
--country=<value> country of owner, as a two-letter ISO country code
--keysize=<value> RSA key size in bits (default: 2048)
--now do not prompt for any owner information
--owner=<value> name of organization certificate belongs to
--selfsigned generate a self-signed certificate instead of a CSR
--subject=<value> specify entire certificate subject
DESCRIPTION
generate a key and a CSR or self-signed certificate
Generate a key and certificate signing request (or self-signed certificate)
for an app. Prompts for information to put in the certificate unless --now
is used, or at least one of the --subject, --owner, --country, --area, or
--city options is specified.
EXAMPLES
$ heroku certs:generate example.com
See code: commands/certs/generate.js
heroku certs:infoshow certificate information for an SSL certificate
USAGE
$ heroku certs:info -a <value> [--name <value>] [--endpoint <value>] [--show-domains] [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
--endpoint=<value> endpoint to check info on
--name=<value> name to check info on
--show-domains show associated domains
DESCRIPTION
show certificate information for an SSL certificate
See code: commands/certs/info.js
heroku certs:keyprint the correct key for the given certificate
USAGE
$ heroku certs:key -a <value> [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
DESCRIPTION
print the correct key for the given certificate
You must pass one single certificate, and one or more keys.
The first key that signs the certificate will be printed back.
EXAMPLES
$ heroku certs:key example.com.crt example.com.key
See code: commands/certs/key.js
heroku certs:removeremove an SSL certificate from an app
USAGE
$ heroku certs:remove -a <value> [--name <value>] [--endpoint <value>] [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
--endpoint=<value> endpoint to remove
--name=<value> name to remove
DESCRIPTION
remove an SSL certificate from an app
See code: commands/certs/remove.js
heroku certs:update CRT KEYupdate an SSL certificate on an app
USAGE
$ heroku certs:update CRT KEY -a <value> [--bypass] [--name <value>] [--endpoint <value>] [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
--bypass bypass the trust chain completion step
--endpoint=<value> endpoint to update
--name=<value> name to update
DESCRIPTION
update an SSL certificate on an app
Note: certificates with PEM encoding are also valid
EXAMPLES
$ heroku certs:update example.com.crt example.com.key
If you require intermediate certificates, refer to this article on merging certificates to get a complete chain:
https://help.salesforce.com/s/articleView?id=000333504&type=1
See code: commands/certs/update.js
FAQs
heroku ssl plugin
The npm package @heroku-cli/plugin-certs-v5 receives a total of 2,540 weekly downloads. As such, @heroku-cli/plugin-certs-v5 popularity was classified as popular.
We found that @heroku-cli/plugin-certs-v5 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 51 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket won two 2026 Reppy Awards from RepVue, ranking in the top 5% of all sales orgs. AE Alexandra Lister shares what it's like to grow a sales career here.

Security News
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.

Company News
/Security News
Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.