Use this endpoint to get information about a codesigning certificate.
curl --location --request POST 'https://daas.digicert.com/apicontroller/v1/certificates/codesigning/getDetails' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json' \
--data-raw
'{
"accountId": 5153184,
"divisionId": 677793,
"thumbprint": "d8ea745878725ac476c31ed46e4af6b0eac2a3f9"
}'
{
"error": null,
"data": {
"thumbprint": "d8ea745878725ac476c31ed46e4af6b0eac2a3f9",
"serialNumber": "330000036b6f36006f23f168b500000000036b",
"filePath": "C:\\ProgramData\\Microsoft\\Windows Defender\\platform\\4.18.2203.5-0\\MpDlpCmd.exe,C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.2203.5-\\X86\\MpCmdRun.exe",
"signingTime": null,
"validFrom": 1643311878000,
"expiryDate": 1674761478000,
"org": "Microsoft Corporation",
"cn": "Microsoft Windows Publisher",
"orgUnit": null,
"city": "Redmond",
"state": "Washington",
"country": "US",
"ca": "Unknown",
"subject": "CN=Microsoft Windows Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
"issuer": "CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, ST=Washington, C=US",
"firstDiscoveredDate": 1650256237522,
"lastDiscoveredDate": 1652160553623,
"keyAlgo": "RSA",
"keyLength": 2048,
"sigAlgo": "SHA256withRSA",
"certStatus": "VALID",
"certStatusError": "OCSP_CRL_CONNECT_ERROR",
"tags": null,
"renewalEmailPreference": true,
"emailAddresses": null,
"source": "Agent",
"serverHost": "121Box,m80win,myagent1,win26agent,win28one,win30,win83ca,win85ca,win89,win93ca,win97",
"binaryFilePath": "C:\\ProgramData\\Microsoft\\Windows Defender\\platform\\4.18.2203.5-0\\MpDlpCmd.exe,C:\\ProgramData\\Microsoft\\Windows Defender\\platform\\4.18.2203.5-
0\\X86\\MpCmdRun.exe"
}
}
Name | Req/Opt | Type | Description |
---|---|---|---|
accountId | required | string | Account ID. |
divisionId | required | integer | Division ID. |
thumbprint | required | integer | Thumbprint of the certificate. |
Name | Type | Description |
---|---|---|
error | object | Includes error codes, if any. |
data | object | Object with information about the codesigning certificate. |
.. .. thumbprint | string | Thumbprint details associated with the certificate. |
.. .. serialNumber | string | Serial number assigned to the certificate on issuance. |
.. .. filePath | string | The file path from where the certificate is discovered. |
.. .. signingTime | integer | Time when the certificate was signed. |
.. .. validFrom | string |
Validity start date. Format: epoch in millisecond. Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system. Example: 1596781119000
|
.. .. expiryDate | integer |
Validity end date. Format: epoch in millisecond. Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system. Example: 1596781119000
|
.. .. org | string | Organization name on the certificate. |
.. .. cn | string | Common name on the certificate. |
.. .. orgunit | string | Organization unit on the certificate. |
.. .. city | string | City on the certificate. |
.. .. state | string | State on the certificate. |
.. .. country | string | Country on the certificate. |
.. .. ca | string | Certificate Authority that issued the certificate. |
.. .. subject | string | Full certificate distinguished name. |
.. .. issuer | string | Root certificate that the certificate was issued from. |
.. .. firstDiscoveredDate | integer |
Date certificate was first found by CertCentral Discovery scan. Format: epoch in millisecond. Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system. Example: 1855828800000
|
.. .. lastDiscoveredDate | integer | Date certificate was last found by CertCentral Discovery scan. |
.. .. keyAlgo | string | Encryption algorithm for the certificate's key. |
.. .. keyLength | integer | Encryption key size for the certificate. |
.. .. sigAlgo | string | Signing algorithm used. |
.. .. certStatus | string |
Status of the certificate.
|
.. .. certStatusError | string | Errors retrieving certificate status. |
.. .. tags | string | Custom tags added by certificate owner, subscriber, or other admin. |
.. .. renewalEmailPreference | boolean |
Whether renewal email preference is enabled or not. Default: true
|
.. .. emailAddresses | string | Email address for the contact associated with the certificate. |
.. .. source | string |
The scan used to identify the certificate. Possible values: sensor , agent .Note: Possible values are Manual Upload or Cloud scan for server certificates.
|
.. .. serverHost | string |
The server host associated with the certificate. Values are comma-separated. |
.. .. binaryFilePath | string |
Binary file path to the certificate. Values are comma-separated. |