Usage:
  aptible endpoints:tls:create SERVICE [flags]

Flags:
      --app string                       App handle
      --certificate string               Certificate common name
      --certificate-file string          Path to certificate PEM file (creates a new certificate)
      --certificate-fingerprint string   SHA256 fingerprint of an existing certificate
      --default-domain                   Use Aptible's managed wildcard domain
      --disable-weak-cipher-suites       Block the SSLv3 protocol and RC4 ciphers
  -e, --env string                       Environment handle (alias)
      --environment string               Environment handle
      --idle-timeout string              Idle timeout in seconds (or 'default' to reset)
      --internal                         Restrict this endpoint to internal traffic
      --ip-whitelist strings             IP CIDR whitelist (comma-separated or use flag multiple times)
      --managed-tls                      Use Managed TLS (requires --managed-tls-domain)
      --managed-tls-domain string        Domain for Managed TLS
      --no-default-domain                Clear the default domain setting
      --no-disable-weak-cipher-suites    Clear the disable weak cipher suites setting
      --no-internal                      Do not restrict this endpoint to internal traffic
      --no-managed-tls                   Disable Managed TLS
      --ports strings                    Container ports (comma-separated or use flag multiple times)
      --private-key-file string          Path to private key PEM file (used with --certificate-file)
      --ssl-ciphers-override string      Allowed SSL ciphers; use "default" to reset to platform default
      --ssl-protocols-override string    Allowed SSL protocols; use "default" to reset to platform default

aptible endpoints:tls:create \
        "$SERVICE" \
        --app "$APP_HANDLE" \
        --certificate-fingerprint "$CERTIFICATE_FINGERPRINT" \
        --ports 8000 8001 8002 8003