# certificate:create

Last edited on 28 Aug 2025

## Scope Summary

Upload SSL certificates

## Required Scopes

To add a scope to an API token, you must also add its required scopes. For example, to add a non-read scope for a resource type, you must also add the read scope for that resource type.

The following scopes are required for `certificate:create`:

| Scope | Description |
|---|---|
| [`certificate:read`](../../certificate/read) | View SSL certificates |

## Associated Scopes

Associated scopes are not required, but they support full functionality of the scope they’re associated with.

For example, to create a Droplet, you need `droplet:create`. To tag a Droplet during creation, you additionally need `tag:create`, so `tag:create` is listed as an associated scope for `droplet:create`.

The following scopes are associated with `certificate:create`:

| Scope | Description |
|---|---|
| [`domain:read`](../../domain/read) | View domains and domain records |
| [`domain:update`](../../domain/update) | Modify domains and domain records |