---
title: "List certificates"
source_url: https://dev.digicert.com/certcentral-apis/discovery-api/certificates/list-certificates.html
api_method: POST
api_endpoint: "/apicontroller/v1/certificate/list"
api_url: "https://daas.digicert.com/apicontroller/v1/certificate/list"
---

**POST** `https://daas.digicert.com/apicontroller/v1/certificate/list`

Get a total count and list of all certificates found through CertCentral Discovery scans. Optionally filter results by certificate attributes.

## Example requests and responses

**cURL**

```bash
curl -X POST \
  https://daas.digicert.com/apicontroller/v1/certificate/list \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
  -d '{
    "searchCriteriaList": [
        {
            "key":"cn",
            "operation": "EQUALS",
            "value": [
                "www.digicert.com","www.cert.com","docs.digicert.com"
            ]
        },
        {
            "key":"org",
            "operation": "EQUALS",
            "value": [
                "DigiCert Inc"
            ]
        },
        {
            "key":"status",
            "operation": "EQUALS",
            "value": [
                "VALID"
            ]
        },
        {
            "key":"serialNum",
            "operation": "EQUALS",
            "value": [
                "0eb6eab418c873d8f3c031dcdddf18b0"
            ]
        },
        {
            "key":"securityRating",
            "operation": "EQUALS",
            "value": [
                "Not secure","At risk"
            ]
        },
        {
            "key":"ca",
            "operation": "EQUALS",
            "value": [
                "DigiCert SHA2 Secure Server CA"
            ]
        },
        {
            "key":"daysToExpire",
            "operation": "EQUALS",
            "value": [
                "90"
            ]
        },
        {
            "key":"tags",
            "operation": "EQUALS",
            "value": [
                "internal","devbox"
            ]
        }
    ],
    "accountId": "126993",
    "divisionIds": [],
    "startIndex": 1,
    "pageSize": 50,
    "sortedColumnId": "cn",
    "sortOrder": "ASC"
}'
```

**Python**

```python
import requests

url = "https://daas.digicert.com/apicontroller/v1/certificate/list"

payload = "{\n    \"searchCriteriaList\": [\n        {\n            \"key\": \"cn\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"www.digicert.com\",\"www.cert.com\",\"docs.digicert.com\"\n            ]\n        },\n        {\n            \"key\": \"org\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"DigiCert Inc\"\n            ]\n        },\n        {\n            \"key\": \"status\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"VALID\"\n            ]\n        },\n        {\n            \"key\": \"serialNum\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"0eb6eab418c873d8f3c031dcdddf18b0\"\n            ]\n        },\n        {\n            \"key\": \"securityRating\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"Not secure\",\"At risk\"\n            ]\n        },\n        {\n            \"key\": \"ca\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"DigiCert SHA2 Secure Server CA\"\n            ]\n        },\n        {\n            \"key\": \"daysToExpire\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"90\"\n            ]\n        },\n        {\n            \"key\": \"tags\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"internal\",\"devbox\"\n            ]\n        }\n    ],\n    \"accountId\": \"126993\",\n    \"divisionIds\": [],\n    \"startIndex\": 1,\n    \"pageSize\": 50,\n    \"sortedColumnId\": \"cn\",\n    \"sortOrder\": \"ASC\"\n}"
headers = {
    'X-DC-DEVKEY': "{{api_key}}",
    'Content-Type': "application/json",
    }

response = requests.request("POST", url, data=payload, headers=headers)

print(response.text)
```

**Go**

```go
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://daas.digicert.com/apicontroller/v1/certificate/list"

	payload := strings.NewReader("{\n    \"searchCriteriaList\": [\n        {\n            \"key\": \"cn\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"www.digicert.com\",\"www.cert.com\",\"docs.digicert.com\"\n            ]\n        },\n        {\n            \"key\": \"org\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"DigiCert Inc\"\n            ]\n        },\n        {\n            \"key\": \"status\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"VALID\"\n            ]\n        },\n        {\n            \"key\": \"serialNum\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"0eb6eab418c873d8f3c031dcdddf18b0\"\n            ]\n        },\n        {\n            \"key\": \"securityRating\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"Not secure\",\"At risk\"\n            ]\n        },\n        {\n            \"key\": \"ca\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"DigiCert SHA2 Secure Server CA\"\n            ]\n        },\n        {\n            \"key\": \"daysToExpire\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"90\"\n            ]\n        },\n        {\n            \"key\": \"tags\",\n            \"operation\": \"EQUALS\",\n            \"value\": [\n                \"internal\",\"devbox\"\n            ]\n        }\n    ],\n    \"accountId\": \"126993\",\n    \"divisionIds\": [],\n    \"startIndex\": 1,\n    \"pageSize\": 50,\n    \"sortedColumnId\": \"cn\",\n    \"sortOrder\": \"ASC\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-DC-DEVKEY", "{{api_key}}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

**NodeJS**

```javascript
var request = require("request");

var options = { method: 'POST',
  url: 'https://daas.digicert.com/apicontroller/v1/certificate/list',
  headers: 
   { 'Content-Type': 'application/json',
     'X-DC-DEVKEY': '{{api_key}}' },
  body: 
   { searchCriteriaList: 
      [ { key: 'cn', operation: 'EQUALS', value: [ 'www.digicert.com','www.cert.com','docs.digicert.com' ] },
        { key: 'org', operation: 'EQUALS', value: [ 'DigiCert Inc' ] },
        { key: 'status', operation: 'EQUALS', value: [ 'VALID' ] },
        { key: 'serialNum', operation: 'EQUALS', value: [ '0eb6eab418c873d8f3c031dcdddf18b0' ] },
        { key: 'securityRating', operation: 'EQUALS', value: [ 'Not secure','At risk' ] },
        { key: 'ca', operation: 'EQUALS', value: [ 'DigiCert SHA2 Secure Server CA' ] },
        { key: 'daysToExpire', operation: 'EQUALS', value: [ '90' ] },
        { key: 'tags', operation: 'EQUALS', value: [ 'internal','devbox' ] } ],
     accountId: '126993',
     divisionIds: [],
     startIndex: 1,
     pageSize: 50,
     sortedColumnId: 'cn',
     sortOrder: 'ASC' },
  json: true };

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});
```


## 200 OK

```json
{
    "data": {
        "totalCount": 81,
        "currentCount": 50,
        "certificateDetailsDTOList": [
            {
                "certId": "fb92ee3a2fd0cb6549e58c252f8787f467bfbeff",
                "serialNum": "2bf1c0d8a20fef721f67011d6231c16e",
                "validFrom": 1523318400000,
                "expiryDate": 1591660799000,
                "subject": "CN=*.aparat.com,OU=EssentialSSL Wildcard,OU=Domain Control Validated",
                "issuedBy": "CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB",
                "cn": "*.aparat.com",
                "ca": "Comodo",
                "lastDiscoveredDate": 1645007394721,
                "firstDiscoveredDate": 1561409074447,
                "keyLength": 2048,
                "algoType": "SHA256withRSA",
                "accountId": null,
                "certStatusString": "VALID",
                "owner": "",
                "org": null,
                "orgUnit": "Domain Control Validated",
                "city": "",
                "state": "",
                "country": "",
                "sanCount": 2,
                "publicKeyAlgo": "RSA",
                "san": "isBlobUTF8=true;[2, *.aparat.com];[2, aparat.com]",
                "certRating": "Secure",
                "tags": "",
                "certStatusError": null,
                "certIssues": "CRLDistributionPoints"
            },
            {
                "certId": "4c5d6a9813d3c858ac1ba279a3dd318460bc9ad7",
                "serialNum": "040b914d32914ffc2474a3fdfd892c99",
                "validFrom": 1539734400000,
                "expiryDate": 1573992000000,
                "subject": "CN=espn.com",
                "issuedBy": "CN=Amazon, OU=Server CA 1B, O=Amazon, C=US",
                "cn": "espn.com",
                "ca": "Amazon",
                 
                "firstDiscoveredDate": 1563917838074,
                "keyLength": 2048,
                "algoType": "SHA256withRSA",
                "accountId": null,
                "certStatusString": "VALID",
                "owner": "",
                "org": null,
                "orgUnit": "",
                "city": "",
                "state": "",
                "country": "",
                "sanCount": 6,
                "publicKeyAlgo": "RSA",
                "san": "isBlobUTF8=true;[2, espn.com];[2, *.espn.com];[2, *.geo.hosted.espn.com];[2, *.us-west-2.aws.hosted.espn.com];[2, *.core.api.espn.com];[2, *.api.espn.com]",
                "certRating": "Secure",
                "tags": "internal",
                "certStatusError": null,
                "certIssues": "IsAliasMatchSAN,CRLDistributionPoints",
                "renewalEmailPreference": true,
                "emailAddresses": "xyz@digicert.com, xy@digicert.com",
                "actions": {
                		"primaryAction": "TRANSFER",
                		"secondaryActions": ["VIEW_ENDPOINT"]},
                "filePath": null,
                "source": "Sensor",
                "serverHost": null,
	        "systemCert": false,
                "selfSignedCaOptIn": true
            }
        ]
    }
}
```

## Request parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>searchCriteriaList</td>
<td>optional</td>
<td>array</td>
<td>Get records for specified criteria.</td>
</tr>
<tr>
<td>.. key</td>
<td>optional</td>
<td>string</td>
<td>Search parameter.<br><strong>Allowed values:</strong> <code>cn</code>, <code>org</code>, <code>status</code>, <code>serialNum</code>, <code>securityRating</code>, <code>ca</code>, <code>daysToExpire</code>, <code>tags</code></td>
</tr>
<tr>
<td>.. operation</td>
<td>optional</td>
<td>string</td>
<td>Search operation.<br><strong>Allowed value:</strong> <code>EQUALS</code></td>
</tr>
<tr>
<td>.. value</td>
<td>optional</td>
<td>array</td>
<td>Search values.</td>
</tr>
<tr>
<td>accountId</td>
<td>required</td>
<td>string</td>
<td>Account ID.</td>
</tr>
<tr>
<td>divisionIds</td>
<td>optional</td>
<td>array</td>
<td>Division IDs.</td>
</tr>
<tr>
<td>startIndex</td>
<td>optional</td>
<td>int</td>
<td>Start at the specified index.<br>Default:
 1</td>
</tr>
<tr>
<td>pageSize</td>
<td>optional</td>
<td>int</td>
<td>Number of records per page.<br><strong>Default:</strong> <code>50</code>,<br><strong>Max:</strong> <code>100</code></td>
</tr>
<tr>
<td>sortedColumnId</td>
<td>optional</td>
<td>string</td>
<td>Sort results by specified parameter.<br><strong>Allowed values:</strong> <code>cn</code>, <code>org</code>, <code>status</code>, <code>serialNum</code>, <code>securityRating</code>, <code>ca</code>, <code>daysToExpire</code><br><strong>Default:</strong> <code>cn</code></td>
</tr>
<tr>
<td>sortOrder</td>
<td>optional</td>
<td>string</td>
<td>Sort direction.<br><strong>Allowed values:</strong> <code>ASC</code> (ascending: 0-9, A-Z), <code>DESC</code> (descending: 9-0, Z-A)<br><strong>Default:</strong> <code>ASC</code></td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>data</td>
<td>object</td>
<td>Container.</td>
</tr>
<tr>
<td>.. totalCount</td>
<td>int</td>
<td>Total number of records that match search criteria.</td>
</tr>
<tr>
<td>.. currentCount</td>
<td>int</td>
<td>Number of records on current page.</td>
</tr>
<tr>
<td>.. certificateDetailsDTOList</td>
<td>array</td>
<td>Container for certificate details.</td>
</tr>
<tr>
<td>.. .. certId</td>
<td>string</td>
<td>Unique DigiCert-generated ID for the certificate. Use for API requests that require it.</td>
</tr>
<tr>
<td>.. .. serialNum</td>
<td>string</td>
<td>Serial number assigned to the certificate on issuance.</td>
</tr>
<tr>
<td>.. .. validFrom</td>
<td>integer</td>
<td>Validity start date.<br><strong>Format:</strong>epoch in millisecond.<br>Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system.<br><strong>Example: <code>1855828800000</code></strong></td>
</tr>
<tr>
<td>.. .. expiryDate</td>
<td>integer</td>
<td>Validity end date.<br><strong>Format:</strong>epoch in millisecond.<br>Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system.<br><strong>Example: <code>1855828800000</code></strong></td>
</tr>
<tr>
<td>.. .. subject</td>
<td>bool</td>
<td>Full certificate distinguished name.</td>
</tr>
<tr>
<td>.. .. issuedBy</td>
<td>string</td>
<td>Root certificate that the certificate was issued from.</td>
</tr>
<tr>
<td>.. .. cn</td>
<td>string</td>
<td>Common name on the certificate.</td>
</tr>
<tr>
<td>.. .. ca</td>
<td>string</td>
<td>Certificate Authority that issued the certificate.</td>
</tr>
<tr>
<td>.. .. lastDiscoveredDate</td>
<td>integer</td>
<td>Date certificate was last found by CertCentral Discovery scan.</td>
</tr>
<tr>
<td>.. .. firstDiscoveredDate</td>
<td>integer</td>
<td>Date certificate was first found by CertCentral Discovery scan.<br><strong>Format:</strong>epoch in millisecond.<br>Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system.<br><strong>Example: <code>1855828800000</code></strong></td>
</tr>
<tr>
<td>.. .. keyLength</td>
<td>string</td>
<td>Encryption key size for the certificate.</td>
</tr>
<tr>
<td>.. .. algoType</td>
<td>string</td>
<td>Encryption algorithm that the certificate uses.</td>
</tr>
<tr>
<td>.. .. accountId</td>
<td>string</td>
<td>Account ID.</td>
</tr>
<tr>
<td>.. .. certStatusString</td>
<td>string</td>
<td><a href="https://dev.digicert.com/md/certcentral-apis/services-api/glossary.md#section-idm33288526595054">Status</a> of the certificate.</td>
</tr>
<tr>
<td>.. .. owner</td>
<td>string</td>
<td>Owner as defined in CertCentral Discovery.</td>
</tr>
<tr>
<td>.. .. org</td>
<td>string</td>
<td>Organization name on the certificate.</td>
</tr>
<tr>
<td>.. .. orgunit</td>
<td>string</td>
<td>Organization unit on the certificate.</td>
</tr>
<tr>
<td>.. .. city</td>
<td>string</td>
<td>City on the certificate.</td>
</tr>
<tr>
<td>.. .. state</td>
<td>string</td>
<td>State on the certificate.</td>
</tr>
<tr>
<td>.. .. country</td>
<td>string</td>
<td>Country on the certificate.</td>
</tr>
<tr>
<td>.. .. sanCount</td>
<td>string</td>
<td>Number of subject alternative names on the certificate.</td>
</tr>
<tr>
<td>.. .. publicKeyAlgo</td>
<td>string</td>
<td>Encryption algorithm for the certificate's public key.</td>
</tr>
<tr>
<td>.. .. san</td>
<td>string</td>
<td>Subject alternative names on the certificate.</td>
</tr>
<tr>
<td>.. .. certRating</td>
<td>string</td>
<td><a href="https://dev.digicert.com/md/certcentral-apis/services-api/glossary.md#section-idm33288526639892">Certificate security rating</a>, based on industry standards and the certificate's settings.</td>
</tr>
<tr>
<td>.. .. tags</td>
<td>string</td>
<td>Custom tags added by certificate owner, subscriber, or other admin.</td>
</tr>
<tr>
<td>.. .. certStatusError</td>
<td>string</td>
<td>Errors retrieving certificate status.</td>
</tr>
<tr>
<td>.. .. certIssues</td>
<td>string</td>
<td>Chart data for certificate issues.</td>
</tr>
<tr>
<td>.. .. renewalEmailPreference</td>
<td>boolean</td>
<td>Whether renewal email preference is enabled or not.<br><strong>Default: <code>true</code></strong></td>
</tr>
<tr>
<td>.. .. emailAddresses</td>
<td>string</td>
<td>Email address for the contact associated with the certificate.</td>
</tr>
<tr>
<td>.. .. actions</td>
<td>object</td>
<td>Action performed on the certificate.</td>
</tr>
<tr>
<td>.. .. filePath</td>
<td>string</td>
<td>File path of the certificate.<br>Values are comma-separated.</td>
</tr>
<tr>
<td>.. .. source</td>
<td>string</td>
<td>The scan used to identify the certificate.<br><strong>Possible values: <code>sensor</code></strong>, <strong><code>agent</code></strong><br><strong>Note:</strong>Possible values are<strong><code>Manual Upload</code></strong>, <strong><code>Cloud scan</code></strong> for server certificates.</td>
</tr>
<tr>
<td>.. .. serverHost</td>
<td>string</td>
<td>The server host associated with the certificate.<br>Values are comma-separated.</td>
</tr>
<tr>
<td>.. .. systemCert</td>
<td>boolean</td>
<td>Whether any system certificates are available or not.</td>
</tr>
<tr>
<td>.. .. selfSignedCaOptIn</td>
<td>boolean</td>
<td>Whether email preference enabled for the self-signed certificates.</td>
</tr>
</tbody>
</table>