View certificate details

POST https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails
Get details for a specific certificate. Details include distinguished name information, CA information, validity period, encryption type, and more.

Example requests and responses

curl -X POST \
  https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
-d '{
    "accountId": "126993",
    "certificateId": "fb92ee3a2fd0cb6549e58c252f8787f467bfbeff",
    "divisionId": "69748"
}'
import requests

url = "https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails"

payload = "{\n    \"accountId\": \"126993\",\n    \"certificateId\": \"fb92ee3a2fd0cb6549e58c252f8787f467bfbeff\",\n    \"divisionId\": \"69748\"\n}"
headers = {
    'X-DC-DEVKEY': "{{api_key}}",
    'Content-Type': "application/json",
    }

response = requests.request("POST", url, data=payload, headers=headers)

print(response.text)
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails"

	payload := strings.NewReader("{\n    \"accountId\": \"126993\",\n    \"certificateId\": \"fb92ee3a2fd0cb6549e58c252f8787f467bfbeff\",\n    \"divisionId\": \"69748\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-DC-DEVKEY", "{{api_key}}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
var request = require("request");

var options = { method: 'POST',
  url: 'https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails',
  headers: 
   { 'Content-Type': 'application/json',
     'X-DC-DEVKEY': '{{api_key}}' },
  body: 
   { accountId: '126993',
     certificateId: 'fb92ee3a2fd0cb6549e58c252f8787f467bfbeff',
     divisionId: 69748 },
  json: true };

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});

200 OK

{
    "data": {
        "certId": "fb92ee3a2fd0cb6549e58c252f8787f467bfbeff",
        "serialNum": "2bf1c0d8a20fef721f67011d6231c16e",
        "validFrom": 1523318400000,
        "expiryDate": 1591660799000,
        "subject": "CN=*.aparat.com,OU=EssentialSSL Wildcard,OU=Domain Control Validated",
        "issuedBy": "CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB",
        "cn": "*.aparat.com",
        "ca": "Comodo",
        "lastDiscoveredDate": 1645007394721,
        "firstDiscoveredDate": 1561409074447,
        "keyLength": 2048,
        "algoType": "SHA256withRSA",
        "accountId": "126993",
        "certStatusString": "VALID",
        "owner": null,
        "org": null,
        "orgUnit": "Domain Control Validated",
        "city": null,
        "state": null,
        "country": null,
        "sanCount": 2,
        "publicKeyAlgo": "RSA",
        "san": "*.aparat.com,aparat.com",
        "certRating": "Secure",
        "tags": null,
        "certStatusError": null,
        "certIssues": "512",
        "renewalEmailPreference": true,
        "emailAddresses": "xyz@digicert.com, abc@digicert.com",
        "actions": null,
        "filePath": null,
        "source": "Sensor",
        "serverHost": null,
        "selfSignedCaOptIn": false,
	"systemCert": false
    }
}

Request parameters

NameReq/OptTypeDescription
accountIdrequiredstringAccount ID.
divisionIdsoptionalarrayDivision IDs.
certificateIdrequiredstringUnique DigiCert-generated ID for the certificate found on the endpoint. Get the certificate ID from the List certificates request.

Response parameters

NameTypeDescription
dataobjectContainer.
.. certIdstringUnique DigiCert-generated ID for the certificate found on the endpoint.
.. serialNumstringSerial number assigned to the certificate on issuance.
.. validFromintegerValidity start date.
**Format:**epoch in millisecond.
Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system.
Example: 1855828800000
.. expiryDateintegerValidity end date.
**Format:**epoch in millisecond.
Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system.
Example: 1855828800000
.. subjectstringFull certificate distinguished name.
.. issuedBystringRoot certificate that the certificate was issued from.
.. cnstringCommon name on the certificate.
.. castringCertificate Authority that issued the certificate.
.. lastDiscoveredDateintegerDate certificate was last found by CertCentral Discovery scan.
.. firstDiscoveredDateintegerDate certificate was first found by CertCentral Discovery scan.
**Format:**epoch in millisecond.
Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system.
Example: 1855828800000
.. keyLengthstringEncryption key size for the certificate.
.. algoTypestringEncryption algorithm that the certificate uses.
.. accountIdstringAccount ID.
.. certStatusStringstringStatus of the certificate.
.. ownerstringOwner as defined in CertCentral Discovery.
.. orgstringOrganization name on the certificate.
.. orgunitstringOrganization unit on the certificate.
.. citystringCity on the certificate.
.. statestringState on the certificate.
.. countrystringCountry on the certificate.
.. sanCountstringNumber of subject alternative names on the certificate.
.. publicKeyAlgostringEncryption algorithm for the certificate’s public key.
.. sanstringSubject alternative names on the certificate.
.. certRatingstringCertificate security rating, based on industry standards and the certificate’s settings.
.. tagsstringCustom tags added by certificate owner, subscriber, or other admin.
.. certStatusErrorstringErrors retrieving certificate status.
.. certIssuesstringChart data for certificate issues.
.. renewalEmailPreferencebooleanWhether renewal email preference is enabled or not.Default: true
.. emailAddressesstringEmail address for the contact associated with the certificate.
.. actionsobjectAction performed on the certificate.
.. filePathstringFile path of the certificate.
Values are comma-separated.
.. sourcestringThe scan used to identify the certificate.
Possible values: sensor, agent
Note:Possible values areManual Upload, Cloud scan for server certificates.
.. serverHoststringThe server host associated with the certificate.
Values are comma-separated.
.. selfSignedCaOptInbooleanWhether email preference enabled for the self-signed certificates.
.. systemCertbooleanWhether any system certificates are available or not.