--- updatedAt: 2026-04-23T19:16:03.000Z agentTools: projectIndex: https://docs.censys.com/llms.txt --- # Get a certificate Retrieve information about a single certificate. A certificate ID is its SHA-256 fingerprint in the Censys dataset. # OpenAPI definition ```json { "components": { "schemas": { "AuthenticationError": { "additionalProperties": false, "properties": { "error": { "$ref": "#/components/schemas/AuthenticationErrorDetail", "description": "Detailed information about the authentication error" } }, "type": "object" }, "AuthenticationErrorDetail": { "additionalProperties": false, "properties": { "code": { "description": "HTTP status code", "examples": [ 401 ], "format": "int64", "type": "integer" }, "message": { "description": "Human-readable message describing the error occurrence", "examples": [ "Access credentials are invalid" ], "type": "string" }, "reason": { "description": "Human-readable explanation of the underlying cause of the error", "examples": [ "Access token is not active" ], "type": "string" }, "request": { "type": "string" }, "status": { "description": "HTTP status message associated with the error", "examples": [ "Unauthorized" ], "type": "string" } }, "type": "object" }, "AuthorityInfoAccess": { "additionalProperties": false, "properties": { "issuer_urls": { "items": { "type": "string" }, "type": [ "array", "null" ] }, "ocsp_urls": { "items": { "type": "string" }, "type": [ "array", "null" ] } }, "type": "object" }, "BasicConstraints": { "additionalProperties": false, "properties": { "is_ca": { "description": "Whether the certificate is permitted to sign other certificates.", "type": "boolean" }, "max_path_len": { "description": "When present, provides the maximum number of intermediate certificates that may follow this certificate in a trusted certification path.", "format": "int32", "type": "integer" } }, "type": "object" }, "CabfOrganizationId": { "additionalProperties": false, "properties": { "country": { "type": "string" }, "reference": { "type": "string" }, "scheme": { "type": "string" }, "state": { "type": "string" } }, "type": "object" }, "Certificate": { "additionalProperties": false, "properties": { "added_at": { "description": "When the certificate was added to the Censys dataset.", "type": "string" }, "ct": { "$ref": "#/components/schemas/Ct" }, "ever_seen_in_scan": { "description": "Whether the certificate has ever been presented by a service during a scan.", "type": "boolean" }, "fingerprint_md5": { "description": "The MD-5 digest of the entire raw certificate. An identifier used by some systems.", "format": "hex", "type": "string" }, "fingerprint_sha1": { "description": "The SHA-1 digest of the entire raw certificate. An identifier used by some systems.", "format": "hex", "type": "string" }, "fingerprint_sha256": { "description": "The SHA-256 digest of the entire raw certificate. Its unique identifier, which Censys uses to index certificates records.", "format": "hex", "type": "string" }, "modified_at": { "description": "When the certificate record was last modified.", "type": "string" }, "names": { "description": "All the names contained in the certificate from various fields.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "parent_spki_fingerprint_sha256": { "description": "DEPRECATED: Use parent_spki_subject_fingerprint_sha256", "format": "hex", "type": "string" }, "parent_spki_subject_fingerprint_sha256": { "description": "The SHA-256 digest of the parent certificate's DER-encoded SubjectPublicKeyInfo concatenated with its Subject.", "format": "hex", "type": "string" }, "parse_status": { "enum": [ "", "success", "fail", "corrupted" ], "type": "string" }, "parsed": { "$ref": "#/components/schemas/Certificate_Parsed", "description": "A record containing all of the data parsed from the certificate." }, "precert": { "description": "Whether the X.509 \"poison\" extension (OID: 1.3.6.1.4.1.11129.2.4.3) is marked critical, which prohibits the pre-certificate from being trusted.", "type": "boolean" }, "revocation": { "$ref": "#/components/schemas/CertificateRevocation", "description": "A record containing revocation information, if the certificate has been revoked." }, "revoked": { "description": "Whether the certificate has been revoked before its expiry date by the issuer.", "type": "boolean" }, "spki_fingerprint_sha256": { "description": "DEPRECATED: Use spki_subject_fingerprint_sha256", "format": "hex", "type": "string" }, "spki_subject_fingerprint_sha256": { "description": "The SHA-256 digest of the certificate's DER-encoded SubjectPublicKeyInfo concatenated with its Subject.", "format": "hex", "type": "string" }, "tbs_fingerprint_sha256": { "description": "The SHA-256 digest of the unsigned certificate's contents.", "format": "hex", "type": "string" }, "tbs_no_ct_fingerprint_sha256": { "description": "The SHA-256 digest of the unsigned certificate with the CT Poison extension removed, if present. This represents the shared contents of a certificate and its corresponding pre-certificate.", "format": "hex", "type": "string" }, "validated_at": { "description": "When the certificate record's trust was last checked.", "type": "string" }, "validation": { "$ref": "#/components/schemas/Validation", "description": "A record containing information from the maintainers of major root certificate stores related to their trust assessment." }, "validation_level": { "description": "The extent to which the certificate's issuer validated the identity of the entity requesting the certificate. Options include Domain validated (DV), Organization Validated (OV), or Extended Validation (EV).", "enum": [ "", "dv", "ov", "ev" ], "type": "string" }, "zlint": { "$ref": "#/components/schemas/ZLint", "description": "A record containing the results of linting the certificate for conformance to the X.509 standard using Zlint." } }, "type": "object" }, "CertificateAsset": { "additionalProperties": false, "properties": { "extensions": { "additionalProperties": {}, "type": "object" }, "resource": { "$ref": "#/components/schemas/Certificate" } }, "required": [ "resource", "extensions" ], "type": "object" }, "CertificateExtensions": { "additionalProperties": false, "properties": { "authority_info_access": { "$ref": "#/components/schemas/AuthorityInfoAccess", "description": "The parsed id-pe-authorityInfoAccess extension (OID: 1.3.6.1.5.7.1.1). Only id-ad-caIssuers and id-ad-ocsp accessMethods are supported; others are omitted." }, "authority_key_id": { "description": "A key identifier, usually a digest of the DER-encoded SubjectPublicKeyInfo.", "format": "hex", "type": "string" }, "basic_constraints": { "$ref": "#/components/schemas/BasicConstraints", "description": "The parsed id-ce-basicConstraints extension (OID: 2.5.29.19)." }, "cabf_organization_id": { "$ref": "#/components/schemas/CabfOrganizationId", "description": "CA/Browser Forum organization ID extensions (OID: 2.23.140.3.1)." }, "certificate_policies": { "description": "The parsed id-ce-certificatePolicies extension (OID: 2.5.29.32).", "items": { "$ref": "#/components/schemas/CertificatePolicy" }, "type": [ "array", "null" ] }, "crl_distribution_points": { "description": "The parsed id-ce-cRLDistributionPoints extension (OID: 2.5.29.31). Contents are a list of distributionPoint URLs; other distributionPoint types are omitted).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "ct_poison": { "description": "Whether the certificate possesses the pre-certificate \"poison\" extension (OID: 1.3.6.1.4.1.11129.2.4.3).", "type": "boolean" }, "extended_key_usage": { "$ref": "#/components/schemas/ExtendedKeyUsage", "description": "The parsed id-ce-extKeyUsage extension (OID: 2.5.29.37)." }, "issuer_alt_name": { "$ref": "#/components/schemas/GeneralNames", "description": "The parsed id-ce-issuerAltName extension (OID: 2.5.29.18)." }, "key_usage": { "$ref": "#/components/schemas/KeyUsage", "description": "The parsed id-ce-keyUsage extension (OID: 2.5.29.15)." }, "name_constraints": { "$ref": "#/components/schemas/NameConstraints", "description": "The parsed id-ce-nameConstraints extension (OID: 2.5.29.30). Specifies a name space within which all child certificates' subject names MUST be located." }, "qc_statements": { "$ref": "#/components/schemas/QcStatements" }, "signed_certificate_timestamps": { "items": { "$ref": "#/components/schemas/SignedCertificateTimestamp" }, "type": [ "array", "null" ] }, "subject_alt_name": { "$ref": "#/components/schemas/GeneralNames", "description": "The parsed id-ce-subjectAltName extension (OID: 2.5.29.17)." }, "subject_key_id": { "description": "A key identifier, usually a digest of the DER-encoded SubjectPublicKeyInfo..", "format": "hex", "type": "string" }, "tor_service_descriptors": { "items": { "$ref": "#/components/schemas/TorServiceDescriptor" }, "type": [ "array", "null" ] } }, "type": "object" }, "CertificatePolicy": { "additionalProperties": false, "properties": { "cps": { "items": { "type": "string" }, "type": [ "array", "null" ] }, "id": { "type": "string" }, "user_notice": { "items": { "$ref": "#/components/schemas/UserNotice" }, "type": [ "array", "null" ] } }, "type": "object" }, "CertificateRevocation": { "additionalProperties": false, "properties": { "crl": { "$ref": "#/components/schemas/CertificateRevocation_RevocationInfo" }, "ocsp": { "$ref": "#/components/schemas/CertificateRevocation_RevocationInfo" } }, "type": "object" }, "CertificateRevocation_RevocationInfo": { "additionalProperties": false, "properties": { "next_update": { "type": "string" }, "reason": { "description": "An enumerated value indicating the issuer-supplied reason for the revocation.", "enum": [ "", "unspecified", "key_compromise", "ca_compromise", "affiliation_changed", "superseded", "cessation_of_operation", "certificate_hold", "remove_from_crl", "privilege_withdrawn", "aa_compromise" ], "type": "string" }, "revocation_time": { "description": "The issuer-supplied timestamp indicating when the certificate was revoked.", "type": "string" }, "revoked": { "description": "Whether the certificate has been revoked before its expiry date by the issuer.", "type": "boolean" } }, "type": "object" }, "Certificate_Parsed": { "additionalProperties": false, "properties": { "extensions": { "$ref": "#/components/schemas/CertificateExtensions", "description": "A record containing parsed X.509 extensions that provide additional identification information or additional cryptographic capabilities." }, "issuer": { "$ref": "#/components/schemas/DistinguishedName", "description": "A record containing the parsed contents of the issuer_dn." }, "issuer_dn": { "description": "Distinguished Name of the entity that has signed and issued the certificate.", "type": "string" }, "ja4x": { "type": "string" }, "redacted": { "type": "boolean" }, "serial_number": { "description": "Issuer-specific identifier of the certificate.", "type": "string" }, "serial_number_hex": { "description": "Issuer-specific identifier of the certificate, represented as hexadecimal.", "type": "string" }, "signature": { "$ref": "#/components/schemas/Signature" }, "subject": { "$ref": "#/components/schemas/DistinguishedName", "description": "A record containing the parsed contents of the subject_dn." }, "subject_dn": { "description": "Distinguished Name of the entity associated with the public key.", "type": "string" }, "subject_key_info": { "$ref": "#/components/schemas/SubjectKeyInfo", "description": "Information about the certificate's public key." }, "unknown_extensions": { "items": { "$ref": "#/components/schemas/Extension" }, "type": [ "array", "null" ] }, "validity_period": { "$ref": "#/components/schemas/ValidityPeriod", "description": "Information about the time for which the certificate is valid." }, "version": { "format": "int32", "type": "integer" } }, "type": "object" }, "Ct": { "additionalProperties": false, "properties": { "entries": { "additionalProperties": { "$ref": "#/components/schemas/Ct_Record" }, "type": "object" } }, "type": "object" }, "Ct_Record": { "additionalProperties": false, "properties": { "added_to_ct_at": { "description": "An RFC-3339-formatted timestamp indicating when the certificate was entered into the CT log.", "type": "string" }, "ct_to_censys_at": { "description": "An RFC-3339-formated timestamp indicating when the certificate was ingested from the CT log into the Censys dataset.", "type": "string" }, "index": { "description": "Numerical marker of the certificate's place in the CT log.", "format": "int64", "type": "integer" } }, "type": "object" }, "DistinguishedName": { "additionalProperties": false, "properties": { "common_name": { "description": "The commonName (CN) elements of the Distinguished Name (OID: 2.5.4.3).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "country": { "description": "The countryName (C) elements of the Distinguished Name (OID: 2.5.4.6).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "domain_component": { "description": "The domainComponent (DC) elements of the Distinguished Name (OID: 0.9.2342.19200300.100.1.25).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "email_address": { "description": "The emailAddress (E) elements of the Distinguished Name (OID: 1.2.840.113549.1.9.1).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "given_name": { "description": "The givenName (G) elements of the Distinguished Name (OID: 2.5.4.42).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "jurisdiction_country": { "description": "The jurisdictionCountry elements of the Distinguished Name (OID: 1.3.6.1.4.1.311.60.2.1.3).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "jurisdiction_locality": { "description": "The jurisdictionLocality elements of the Distinguished Name (OID: 1.3.6.1.4.1.311.60.2.1.1).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "jurisdiction_province": { "description": "The jurisdictionStateOrProvince elements of the Distinguished Name (OID: 1.3.6.1.4.1.311.60.2.1.2).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "locality": { "description": "The localityName (L) elements of the Distinguished Name (OID: 2.5.4.7).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "organization": { "description": "The organizationName (O) elements of the Distinguished Name (OID: 2.5.4.10).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "organization_id": { "items": { "type": "string" }, "type": [ "array", "null" ] }, "organizational_unit": { "description": "The organizationalUnit (OU) elements of the Distinguished Name (OID: 2.5.4.11).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "postal_code": { "description": "The postalCode elements of the Distinguished Name (OID: 2.5.4.17).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "province": { "description": "The stateOrProvinceName (ST) elements of the Distinguished Name (OID: 2.5.4.8).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "serial_number": { "description": "The serialNumber elements of the Distinguished Name (OID: 2.5.4.5).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "street_address": { "description": "The streetAddress (STREET) elements of the Distinguished Name (OID: 2.5.4.9).", "items": { "type": "string" }, "type": [ "array", "null" ] }, "surname": { "description": "The surname (SN) elements of the Distinguished Name (OID: 2.5.4.4).", "items": { "type": "string" }, "type": [ "array", "null" ] } }, "type": "object" }, "DsaPublicKey": { "additionalProperties": false, "properties": { "g": { "format": "hex", "type": "string" }, "p": { "format": "hex", "type": "string" }, "q": { "format": "hex", "type": "string" }, "y": { "format": "hex", "type": "string" } }, "type": "object" }, "EcdsaPublicKey": { "additionalProperties": false, "properties": { "b": { "format": "hex", "type": "string" }, "curve": { "type": "string" }, "gx": { "format": "hex", "type": "string" }, "gy": { "format": "hex", "type": "string" }, "length": { "format": "int64", "type": "integer" }, "n": { "format": "hex", "type": "string" }, "p": { "format": "hex", "type": "string" }, "pub": { "format": "hex", "type": "string" }, "x": { "format": "hex", "type": "string" }, "y": { "format": "hex", "type": "string" } }, "type": "object" }, "EdiPartyName": { "additionalProperties": false, "properties": { "name_assigner": { "type": "string" }, "party_name": { "type": "string" } }, "type": "object" }, "ErrorDetail": { "additionalProperties": false, "properties": { "location": { "description": "Where the error occurred, e.g. 'body.items[3].tags' or 'path.thing-id'", "type": "string" }, "message": { "description": "Error message text", "type": "string" }, "value": { "description": "The value at the given location" } }, "type": "object" }, "ErrorModel": { "additionalProperties": false, "properties": { "detail": { "description": "A human-readable explanation specific to this occurrence of the problem.", "examples": [ "Property foo is required but is missing." ], "type": "string" }, "errors": { "description": "Optional list of individual error details", "items": { "$ref": "#/components/schemas/ErrorDetail" }, "type": [ "array", "null" ] }, "instance": { "description": "A URI reference that identifies the specific occurrence of the problem.", "examples": [ "https://example.com/error-log/abc123" ], "format": "uri", "type": "string" }, "status": { "description": "HTTP status code", "examples": [ 400 ], "format": "int64", "type": "integer" }, "title": { "description": "A short, human-readable summary of the problem type. This value should not change between occurrences of the error.", "examples": [ "Bad Request" ], "type": "string" }, "type": { "default": "about:blank", "description": "A URI reference to human-readable documentation for the error.", "examples": [ "https://example.com/errors/example" ], "format": "uri", "type": "string" } }, "type": "object" }, "ExtendedKeyUsage": { "additionalProperties": false, "properties": { "any": { "type": "boolean" }, "apple_code_signing": { "type": "boolean" }, "apple_code_signing_development": { "type": "boolean" }, "apple_code_signing_third_party": { "type": "boolean" }, "apple_crypto_development_env": { "type": "boolean" }, "apple_crypto_env": { "type": "boolean" }, "apple_crypto_maintenance_env": { "type": "boolean" }, "apple_crypto_production_env": { "type": "boolean" }, "apple_crypto_qos": { "type": "boolean" }, "apple_crypto_test_env": { "type": "boolean" }, "apple_crypto_tier0_qos": { "type": "boolean" }, "apple_crypto_tier1_qos": { "type": "boolean" }, "apple_crypto_tier2_qos": { "type": "boolean" }, "apple_crypto_tier3_qos": { "type": "boolean" }, "apple_ichat_encryption": { "type": "boolean" }, "apple_ichat_signing": { "type": "boolean" }, "apple_resource_signing": { "type": "boolean" }, "apple_software_update_signing": { "type": "boolean" }, "apple_system_identity": { "type": "boolean" }, "client_auth": { "type": "boolean" }, "code_signing": { "type": "boolean" }, "dvcs": { "type": "boolean" }, "eap_over_lan": { "type": "boolean" }, "eap_over_ppp": { "type": "boolean" }, "email_protection": { "type": "boolean" }, "ipsec_end_system": { "type": "boolean" }, "ipsec_intermediate_system_usage": { "type": "boolean" }, "ipsec_tunnel": { "type": "boolean" }, "ipsec_user": { "type": "boolean" }, "microsoft_ca_exchange": { "type": "boolean" }, "microsoft_cert_trust_list_signing": { "type": "boolean" }, "microsoft_csp_signature": { "type": "boolean" }, "microsoft_document_signing": { "type": "boolean" }, "microsoft_drm": { "type": "boolean" }, "microsoft_drm_individualization": { "type": "boolean" }, "microsoft_efs_recovery": { "type": "boolean" }, "microsoft_embedded_nt_crypto": { "type": "boolean" }, "microsoft_encrypted_file_system": { "type": "boolean" }, "microsoft_enrollment_agent": { "type": "boolean" }, "microsoft_kernel_mode_code_signing": { "type": "boolean" }, "microsoft_key_recovery_21": { "type": "boolean" }, "microsoft_key_recovery_3": { "type": "boolean" }, "microsoft_license_server": { "type": "boolean" }, "microsoft_licenses": { "type": "boolean" }, "microsoft_lifetime_signing": { "type": "boolean" }, "microsoft_mobile_device_software": { "type": "boolean" }, "microsoft_nt5_crypto": { "type": "boolean" }, "microsoft_oem_whql_crypto": { "type": "boolean" }, "microsoft_qualified_subordinate": { "type": "boolean" }, "microsoft_root_list_signer": { "type": "boolean" }, "microsoft_server_gated_crypto": { "type": "boolean" }, "microsoft_sgc_serialized": { "type": "boolean" }, "microsoft_smart_display": { "type": "boolean" }, "microsoft_smartcard_logon": { "type": "boolean" }, "microsoft_system_health": { "type": "boolean" }, "microsoft_system_health_loophole": { "type": "boolean" }, "microsoft_timestamp_signing": { "type": "boolean" }, "microsoft_whql_crypto": { "type": "boolean" }, "netscape_server_gated_crypto": { "type": "boolean" }, "ocsp_signing": { "type": "boolean" }, "sbgp_cert_aa_service_auth": { "type": "boolean" }, "server_auth": { "type": "boolean" }, "time_stamping": { "type": "boolean" }, "unknown": { "items": { "type": "string" }, "type": [ "array", "null" ] } }, "type": "object" }, "Extension": { "additionalProperties": false, "properties": { "critical": { "type": "boolean" }, "id": { "type": "string" }, "value": { "format": "hex", "type": "string" } }, "type": "object" }, "GeneralNames": { "additionalProperties": false, "properties": { "directory_names": { "description": "The parsed directoryName entries in the GeneralName.", "items": { "$ref": "#/components/schemas/DistinguishedName" }, "type": [ "array", "null" ] }, "dns_names": { "description": "The parsed dNSName entries in the GeneralName.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "edi_party_names": { "description": "The parsed eDIPartyName entries in the GeneralName.", "items": { "$ref": "#/components/schemas/EdiPartyName" }, "type": [ "array", "null" ] }, "email_addresses": { "description": "The parsed rfc822Name entries in the GeneralName.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "ip_addresses": { "description": "The parsed ipAddress entries in the GeneralName.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "other_names": { "description": "The parsed otherName entries in the GeneralName. An arbitrary binary value identified by an OID.", "items": { "$ref": "#/components/schemas/OtherName" }, "type": [ "array", "null" ] }, "registered_ids": { "description": "The parsed registeredID entries in the GeneralName. Stored in dotted-decimal format.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "uniform_resource_identifiers": { "description": "The parsed uniformResourceIdentifier entries in the GeneralName.", "items": { "type": "string" }, "type": [ "array", "null" ] } }, "type": "object" }, "GeneralSubtreeIp": { "additionalProperties": false, "properties": { "begin": { "description": "The first IP address in the range.", "type": "string" }, "cidr": { "description": "The CIDR specifying the subtree.", "type": "string" }, "end": { "description": "The last IP address in the range.", "type": "string" }, "mask": { "description": "The subnet mask of the CIDR.", "type": "string" } }, "type": "object" }, "KeyAlgorithm": { "additionalProperties": false, "properties": { "name": { "description": "Name of public key type, such as RSA or ECDSA. Information specific to the key type is available in the named sub-record.", "type": "string" }, "oid": { "type": "string" } }, "type": "object" }, "KeyUsage": { "additionalProperties": false, "properties": { "certificate_sign": { "description": "Whether the keyCertSign bit is set.", "type": "boolean" }, "content_commitment": { "description": "Whether the contentCommitment (formerly called nonRepudiation) bit is set.", "type": "boolean" }, "crl_sign": { "description": "Whether the cRLSign bit is set.", "type": "boolean" }, "data_encipherment": { "description": "Whether the dataEncipherment bit is set.", "type": "boolean" }, "decipher_only": { "description": "Whether the decipherOnly bit is set.", "type": "boolean" }, "digital_signature": { "description": "Whether the digitalSignature bit is set.", "type": "boolean" }, "encipher_only": { "description": "Whether the encipherOnly bit is set.", "type": "boolean" }, "key_agreement": { "description": "Whether the keyAgreement bit is set.", "type": "boolean" }, "key_encipherment": { "description": "Whether the keyEncipherment bit is set.", "type": "boolean" }, "value": { "description": "The integer value of the bitmask in the extension.", "format": "int32", "minimum": 0, "type": "integer" } }, "type": "object" }, "NameConstraints": { "additionalProperties": false, "properties": { "critical": { "type": "boolean" }, "excluded_directory_names": { "description": "A record providing excluded names of the type directoryName in leaf certificates whose trust path includes this certificate.", "items": { "$ref": "#/components/schemas/DistinguishedName" }, "type": [ "array", "null" ] }, "excluded_edi_party_names": { "description": "A record providing excluded names of the type ediPartyName in leaf certificates whose trust path includes this certificate.", "items": { "$ref": "#/components/schemas/EdiPartyName" }, "type": [ "array", "null" ] }, "excluded_email_addresses": { "description": "A record providing a range of excluded names of the type rfc822Name in leaf certificates whose trust path includes this certificate.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "excluded_ip_addresses": { "description": "A record providing a range of excluded names of the type iPAddress in leaf certificates whose trust path includes this certificate.", "items": { "$ref": "#/components/schemas/GeneralSubtreeIp" }, "type": [ "array", "null" ] }, "excluded_names": { "description": "A record providing a range of excluded names of the type dNSName in leaf certificates whose trust path includes this certificate.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "excluded_registered_ids": { "description": "A record providing excluded names of the type registeredID in leaf certificates whose trust path includes this certificate.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "excluded_uris": { "description": "A record providing a range of excluded uniform resource identifiers in leaf certificates whose trust path includes this certificate.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "permitted_directory_names": { "description": "A record providing permitted names of the type directoryName in leaf certificates whose trust path includes this certificate.", "items": { "$ref": "#/components/schemas/DistinguishedName" }, "type": [ "array", "null" ] }, "permitted_edi_party_names": { "description": "A record providing permitted names of the type ediPartyName in leaf certificates whose trust path includes this certificate.", "items": { "$ref": "#/components/schemas/EdiPartyName" }, "type": [ "array", "null" ] }, "permitted_email_addresses": { "description": "A record providing a range of permitted names of the type rfc822Name in leaf certificates whose trust path includes this certificate.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "permitted_ip_addresses": { "description": "A record providing a range of permitted names of the type iPAddress in leaf certificates whose trust path includes this certificate.", "items": { "$ref": "#/components/schemas/GeneralSubtreeIp" }, "type": [ "array", "null" ] }, "permitted_names": { "description": "A record providing a range of permitted names of the type dNSName in leaf certificates whose trust path includes this certificate.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "permitted_registered_ids": { "description": "A record providing permitted names of the type registeredID in leaf certificates whose trust path includes this certificate.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "permitted_uris": { "description": "A record providing a range of permitted uniform resource identifiers in leaf certificates whose trust path includes this certificate.", "items": { "type": "string" }, "type": [ "array", "null" ] } }, "type": "object" }, "NoticeReference": { "additionalProperties": false, "properties": { "notice_numbers": { "items": { "format": "int32", "type": "integer" }, "type": [ "array", "null" ] }, "organization": { "type": "string" } }, "type": "object" }, "OtherName": { "additionalProperties": false, "properties": { "id": { "description": "The OID identifying the syntax of the otherName value.", "type": "string" }, "value": { "description": "The raw otherName value.", "format": "base64", "type": "string" } }, "type": "object" }, "QcStatements": { "additionalProperties": false, "properties": { "ids": { "items": { "type": "string" }, "type": [ "array", "null" ] }, "parsed": { "$ref": "#/components/schemas/QcStatements_ParsedStatements" } }, "type": "object" }, "QcStatements_MonetaryValue": { "additionalProperties": false, "properties": { "amount": { "format": "int64", "type": "integer" }, "currency": { "type": "string" }, "currency_number": { "format": "int64", "type": "integer" }, "exponent": { "format": "int64", "type": "integer" } }, "type": "object" }, "QcStatements_ParsedStatements": { "additionalProperties": false, "properties": { "etsi_compliance": { "items": { "type": "boolean" }, "type": [ "array", "null" ] }, "legislation": { "items": { "$ref": "#/components/schemas/QcStatements_QCLegislation" }, "type": [ "array", "null" ] }, "limit": { "items": { "$ref": "#/components/schemas/QcStatements_MonetaryValue" }, "type": [ "array", "null" ] }, "pds_locations": { "items": { "$ref": "#/components/schemas/QcStatements_PdsLocation" }, "type": [ "array", "null" ] }, "retention_period": { "items": { "format": "int64", "type": "integer" }, "type": [ "array", "null" ] }, "sscd": { "items": { "type": "boolean" }, "type": [ "array", "null" ] }, "types": { "items": { "$ref": "#/components/schemas/QcStatements_QcType" }, "type": [ "array", "null" ] } }, "type": "object" }, "QcStatements_PdsLocation": { "additionalProperties": false, "properties": { "language": { "type": "string" }, "url": { "type": "string" } }, "type": "object" }, "QcStatements_QCLegislation": { "additionalProperties": false, "properties": { "country_codes": { "items": { "type": "string" }, "type": [ "array", "null" ] } }, "type": "object" }, "QcStatements_QcType": { "additionalProperties": false, "properties": { "ids": { "items": { "type": "string" }, "type": [ "array", "null" ] } }, "type": "object" }, "ResponseEnvelopeCertificateAsset": { "additionalProperties": false, "properties": { "result": { "$ref": "#/components/schemas/CertificateAsset" } }, "type": "object" }, "RootStore": { "additionalProperties": false, "properties": { "chains": { "description": "A path of trusted signing certificates up to a root certificate present in a root store, represented as an ordered list of SHA-256 fingerprints.", "items": { "$ref": "#/components/schemas/RootStore_Chain" }, "type": [ "array", "null" ] }, "ever_valid": { "description": "Whether the certificate has ever been considered valid by the root store.", "type": "boolean" }, "had_trusted_path": { "description": "Whether there ever existed a trusted path of signing certificates from a certificate present in the root certificate store.", "type": "boolean" }, "has_trusted_path": { "description": "Whether there currently exists a trusted path of signing certificates from a certificate present in the root certificate store.", "type": "boolean" }, "in_revocation_set": { "description": "Whether the certificate is in the revocation set (e.g. OneCRL) associated with the root store.", "type": "boolean" }, "is_valid": { "description": "Whether the certificate is currently considered valid by the root store: a summary of the trust path, revoked, blocklisted/allowlisted, and expired fields.", "type": "boolean" }, "parents": { "description": "The SHA-256 fingerprints of the certificate's immediate parents in its trust path(s).", "items": { "format": "hex", "type": "string" }, "type": [ "array", "null" ] }, "type": { "description": "The certificate's type. Options include root, intermediate, or leaf.", "enum": [ "", "root", "intermediate", "leaf" ], "type": "string" } }, "type": "object" }, "RootStore_Chain": { "additionalProperties": false, "properties": { "sha256fp": { "items": { "format": "hex", "type": "string" }, "type": [ "array", "null" ] } }, "type": "object" }, "RsaPublicKey": { "additionalProperties": false, "properties": { "exponent": { "description": "The RSA key's public exponent (e).", "format": "int64", "type": "integer" }, "length": { "description": "Bit-length of the RSA modulus.", "format": "int64", "type": "integer" }, "modulus": { "description": "The RSA key's modulus (n) in big-endian encoding.", "format": "hex", "type": "string" } }, "type": "object" }, "Signature": { "additionalProperties": false, "properties": { "self_signed": { "description": "Whether the certificate was signed by its own key.", "type": "boolean" }, "signature_algorithm": { "$ref": "#/components/schemas/KeyAlgorithm" }, "valid": { "description": "Whether the signature is valid.", "type": "boolean" }, "value": { "description": "Contents of the signature.", "format": "hex", "type": "string" } }, "type": "object" }, "SignedCertificateTimestamp": { "additionalProperties": false, "properties": { "log_id": { "format": "hex", "type": "string" }, "signature": { "$ref": "#/components/schemas/SignedCertificateTimestamp_Signature" }, "timestamp": { "type": "string" }, "version": { "format": "int32", "type": "integer" } }, "type": "object" }, "SignedCertificateTimestamp_Signature": { "additionalProperties": false, "properties": { "hash_algorithm": { "type": "string" }, "signature": { "format": "hex", "type": "string" }, "signature_algorithm": { "type": "string" } }, "type": "object" }, "SubjectKeyInfo": { "additionalProperties": false, "properties": { "dsa": { "$ref": "#/components/schemas/DsaPublicKey", "description": "A record containing the public portion of a DSA asymmetric key." }, "ecdsa": { "$ref": "#/components/schemas/EcdsaPublicKey", "description": "A record containing the public portion of an ECDSA asymmetric key." }, "fingerprint_sha256": { "description": "The SHA-256 digest of the certificate's DER-encoded SubjectPublicKeyInfo.", "format": "hex", "type": "string" }, "key_algorithm": { "$ref": "#/components/schemas/KeyAlgorithm", "description": "A record containing information about the type of subject key algorithm and any relevant parameters." }, "rsa": { "$ref": "#/components/schemas/RsaPublicKey", "description": "A record containing the public portion of an RSA asymmetric key." }, "unrecognized": { "$ref": "#/components/schemas/UnrecognizedPublicKey", "description": "A record containing known information about an unrecognized key type." } }, "type": "object" }, "TorServiceDescriptor": { "additionalProperties": false, "properties": { "algorithm_name": { "type": "string" }, "hash": { "format": "hex", "type": "string" }, "hash_bits": { "format": "int32", "type": "integer" }, "onion": { "type": "string" } }, "type": "object" }, "UnrecognizedPublicKey": { "additionalProperties": false, "properties": { "raw": { "format": "hex", "type": "string" } }, "type": "object" }, "UserNotice": { "additionalProperties": false, "properties": { "explicit_text": { "type": "string" }, "notice_reference": { "$ref": "#/components/schemas/NoticeReference" } }, "type": "object" }, "Validation": { "additionalProperties": false, "properties": { "apple": { "$ref": "#/components/schemas/RootStore", "description": "A record containing validation information about the certificate from the Apple root store." }, "chrome": { "$ref": "#/components/schemas/RootStore", "description": "A record containing validation information about the certificate from the Chrome root store." }, "microsoft": { "$ref": "#/components/schemas/RootStore", "description": "A record containing validation information about the certificate from the Microsoft root store." }, "nss": { "$ref": "#/components/schemas/RootStore", "description": "A record containing validation information about the certificate from the Mozilla NSS root store." } }, "type": "object" }, "ValidityPeriod": { "additionalProperties": false, "properties": { "length_seconds": { "description": "The duration of the certificate's validity period, in seconds.", "format": "int64", "type": "integer" }, "not_after": { "description": "An RFC-3339-formatted timestamp after which the certificate is no longer valid.", "type": "string" }, "not_before": { "description": "An RFC-3339-formatted timestamp before which the certificate is not valid.", "type": "string" } }, "type": "object" }, "ZLint": { "additionalProperties": false, "properties": { "errors_present": { "description": "Whether the certificate's attributes triggered any error lints for non-conformance to the X.509 standard.", "type": "boolean" }, "failed_lints": { "description": "A list of lint names which failed, if applicable.", "items": { "type": "string" }, "type": [ "array", "null" ] }, "fatals_present": { "description": "Whether the certificate's attributes triggered any fatal lints for non-conformance to the X.509 standard.", "type": "boolean" }, "notices_present": { "description": "Whether the certificate's attributes triggered any notice lints for non-conformance to the X.509 standard.", "type": "boolean" }, "timestamp": { "description": "An RFC-3339-formated timestamp indicating when the certificate was linted.", "type": "string" }, "version": { "description": "The version of Zlint used to lint the certificate.", "format": "int64", "type": "integer" }, "warnings_present": { "description": "Whether the certificate's attributes triggered any warning lints for non-conformance to the X.509 standard.", "type": "boolean" } }, "type": "object" } }, "securitySchemes": { "PersonalAccessToken": { "description": "Your Censys personal access token. These are managed in your [Account Settings](https://accounts.censys.io/settings/personal-access-tokens)", "scheme": "bearer", "type": "http" } } }, "info": { "contact": { "email": "support@censys.com", "name": "Censys Inc.", "url": "https://censys.com" }, "title": "Censys Platform API", "version": "1.0.151" }, "openapi": "3.1.0", "paths": { "/v3/global/asset/certificate/{certificate_id}": { "get": { "description": "Retrieve information about a single certificate. A certificate ID is its SHA-256 fingerprint in the Censys dataset.", "operationId": "v3-globaldata-asset-certificate", "parameters": [ { "description": "The ID of a Censys organization to associate the request with. If omitted, the request will be processed using the authenticated user's free wallet where applicable. See the [Getting Started docs](https://docs.censys.com/reference/get-started#step-3-find-and-use-your-organization-id-optional) for more information.", "explode": false, "in": "query", "name": "organization_id", "schema": { "description": "The ID of a Censys organization to associate the request with. If omitted, the request will be processed using the authenticated user's free wallet where applicable. See the [Getting Started docs](https://docs.censys.com/reference/get-started#step-3-find-and-use-your-organization-id-optional) for more information.", "examples": [ "11111111-2222-3333-4444-555555555555" ], "format": "uuid", "type": "string" } }, { "description": "The ID of a Censys organization to associate the request with. If omitted, the request will be processed using the authenticated user's free wallet where applicable. See the [Getting Started docs](https://docs.censys.com/reference/get-started#step-3-find-and-use-your-organization-id-optional) for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.", "in": "header", "name": "X-Organization-ID", "schema": { "description": "The ID of a Censys organization to associate the request with. If omitted, the request will be processed using the authenticated user's free wallet where applicable. See the [Getting Started docs](https://docs.censys.com/reference/get-started#step-3-find-and-use-your-organization-id-optional) for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.", "examples": [ "11111111-2222-3333-4444-555555555555" ], "format": "uuid", "type": "string" }, "x-speakeasy-ignore": true }, { "description": "The SHA-256 certificate fingerprint.", "in": "path", "name": "certificate_id", "required": true, "schema": { "description": "The SHA-256 certificate fingerprint.", "examples": [ "3daf2843a77b6f4e6af43cd9b6f6746053b8c928e056e8a724808db8905a94cf" ], "type": "string" } } ], "responses": { "200": { "content": { "application/vnd.censys.api.v3.certificate.v1+json": { "schema": { "$ref": "#/components/schemas/ResponseEnvelopeCertificateAsset" } } }, "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string" } }, "X-Request-ID": { "schema": { "type": "string" } } } }, "400": { "content": { "application/problem+json": { "schema": { "$ref": "#/components/schemas/ErrorModel" } } }, "description": "Bad request" }, "401": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/AuthenticationError" } } }, "description": "Request does not contain a valid Authorization token" }, "403": { "content": { "application/problem+json": { "schema": { "$ref": "#/components/schemas/ErrorModel" } } }, "description": "User does not have permission to access this data" }, "404": { "content": { "application/problem+json": { "schema": { "$ref": "#/components/schemas/ErrorModel" } } }, "description": "No certificate found" }, "500": { "content": { "application/problem+json": { "schema": { "$ref": "#/components/schemas/ErrorModel" } } }, "description": "Internal server error" } }, "security": [ { "PersonalAccessToken": [] } ], "summary": "Get a certificate", "tags": [ "Global Data" ], "x-speakeasy-name-override": "GetCertificate" } } }, "servers": [ { "description": "The Censys Platform API", "url": "https://api.platform.censys.io" } ], "tags": [ { "description": "Endpoints related to the Global Data product", "name": "Global Data" } ], "x-readme": { "parameter-ordering": [ "path", "body", "query", "cookie", "form", "header" ], "samples-languages": [ "shell", "python", "go", "javascript", "java" ] }, "x-speakeasy-globals": { "parameters": [ { "in": "query", "name": "organization_id", "schema": { "type": "string" } } ] } } ```