---
title: "View certificate details"
source_url: https://dev.digicert.com/certcentral-apis/discovery-api/certificates/view-certificate-details.html
api_method: POST
api_endpoint: "/apicontroller/v1/certificate/getCertificateDetails"
api_url: "https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails"
---

**POST** `https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails`

Get details for a specific certificate. Details include distinguished name information, CA information, validity period, encryption type, and more.

## Example requests and responses

**cURL**

```bash
curl -X POST \
  https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
-d '{
    "accountId": "126993",
    "certificateId": "fb92ee3a2fd0cb6549e58c252f8787f467bfbeff",
    "divisionId": "69748"
}'
```

**Python**

```python
import requests

url = "https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails"

payload = "{\n    \"accountId\": \"126993\",\n    \"certificateId\": \"fb92ee3a2fd0cb6549e58c252f8787f467bfbeff\",\n    \"divisionId\": \"69748\"\n}"
headers = {
    'X-DC-DEVKEY': "{{api_key}}",
    'Content-Type': "application/json",
    }

response = requests.request("POST", url, data=payload, headers=headers)

print(response.text)
```

**Go**

```go
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails"

	payload := strings.NewReader("{\n    \"accountId\": \"126993\",\n    \"certificateId\": \"fb92ee3a2fd0cb6549e58c252f8787f467bfbeff\",\n    \"divisionId\": \"69748\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-DC-DEVKEY", "{{api_key}}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

**NodeJS**

```javascript
var request = require("request");

var options = { method: 'POST',
  url: 'https://daas.digicert.com/apicontroller/v1/certificate/getCertificateDetails',
  headers: 
   { 'Content-Type': 'application/json',
     'X-DC-DEVKEY': '{{api_key}}' },
  body: 
   { accountId: '126993',
     certificateId: 'fb92ee3a2fd0cb6549e58c252f8787f467bfbeff',
     divisionId: 69748 },
  json: true };

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});
```


## 200 OK

```json
{
    "data": {
        "certId": "fb92ee3a2fd0cb6549e58c252f8787f467bfbeff",
        "serialNum": "2bf1c0d8a20fef721f67011d6231c16e",
        "validFrom": 1523318400000,
        "expiryDate": 1591660799000,
        "subject": "CN=*.aparat.com,OU=EssentialSSL Wildcard,OU=Domain Control Validated",
        "issuedBy": "CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB",
        "cn": "*.aparat.com",
        "ca": "Comodo",
        "lastDiscoveredDate": 1645007394721,
        "firstDiscoveredDate": 1561409074447,
        "keyLength": 2048,
        "algoType": "SHA256withRSA",
        "accountId": "126993",
        "certStatusString": "VALID",
        "owner": null,
        "org": null,
        "orgUnit": "Domain Control Validated",
        "city": null,
        "state": null,
        "country": null,
        "sanCount": 2,
        "publicKeyAlgo": "RSA",
        "san": "*.aparat.com,aparat.com",
        "certRating": "Secure",
        "tags": null,
        "certStatusError": null,
        "certIssues": "512",
        "renewalEmailPreference": true,
        "emailAddresses": "xyz@digicert.com, abc@digicert.com",
        "actions": null,
        "filePath": null,
        "source": "Sensor",
        "serverHost": null,
        "selfSignedCaOptIn": false,
	"systemCert": false
    }
}
```

## Request parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>accountId</td>
<td>required</td>
<td>string</td>
<td>Account ID.</td>
</tr>
<tr>
<td>divisionIds</td>
<td>optional</td>
<td>array</td>
<td>Division IDs.</td>
</tr>
<tr>
<td>certificateId</td>
<td>required</td>
<td>string</td>
<td>Unique DigiCert-generated ID for the certificate found on the endpoint. Get the certificate ID from the <a href="https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/list-certificates.md">List certificates</a> request.</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>data</td>
<td>object</td>
<td>Container.</td>
</tr>
<tr>
<td>.. certId</td>
<td>string</td>
<td>Unique DigiCert-generated ID for the certificate found on the endpoint.</td>
</tr>
<tr>
<td>.. serialNum</td>
<td>string</td>
<td>Serial number assigned to the certificate on issuance.</td>
</tr>
<tr>
<td>.. validFrom</td>
<td>integer</td>
<td>Validity start date.<br><strong>Format:</strong>epoch in millisecond.<br>Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system.<br><strong>Example: <code>1855828800000</code></strong></td>
</tr>
<tr>
<td>.. expiryDate</td>
<td>integer</td>
<td>Validity end date.<br><strong>Format:</strong>epoch in millisecond.<br>Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system.<br><strong>Example: <code>1855828800000</code></strong></td>
</tr>
<tr>
<td>.. subject</td>
<td>string</td>
<td>Full certificate distinguished name.</td>
</tr>
<tr>
<td>.. issuedBy</td>
<td>string</td>
<td>Root certificate that the certificate was issued from.</td>
</tr>
<tr>
<td>.. cn</td>
<td>string</td>
<td>Common name on the certificate.</td>
</tr>
<tr>
<td>.. ca</td>
<td>string</td>
<td>Certificate Authority that issued the certificate.</td>
</tr>
<tr>
<td>.. lastDiscoveredDate</td>
<td>integer</td>
<td>Date certificate was last found by CertCentral Discovery scan.</td>
</tr>
<tr>
<td>.. firstDiscoveredDate</td>
<td>integer</td>
<td>Date certificate was first found by CertCentral Discovery scan.<br><strong>Format:</strong>epoch in millisecond.<br>Epoch corresponds to 0 hours, 0 minutes, and 0 seconds (00:00:00) Coordinated Universal Time (UTC) on a specific date, which varies from system to system.<br><strong>Example: <code>1855828800000</code></strong></td>
</tr>
<tr>
<td>.. keyLength</td>
<td>string</td>
<td>Encryption key size for the certificate.</td>
</tr>
<tr>
<td>.. algoType</td>
<td>string</td>
<td>Encryption algorithm that the certificate uses.</td>
</tr>
<tr>
<td>.. accountId</td>
<td>string</td>
<td>Account ID.</td>
</tr>
<tr>
<td>.. certStatusString</td>
<td>string</td>
<td><a href="https://dev.digicert.com/md/certcentral-apis/services-api/glossary.md#section-idm33288526595054">Status</a> of the certificate.</td>
</tr>
<tr>
<td>.. owner</td>
<td>string</td>
<td>Owner as defined in CertCentral Discovery.</td>
</tr>
<tr>
<td>.. org</td>
<td>string</td>
<td>Organization name on the certificate.</td>
</tr>
<tr>
<td>.. orgunit</td>
<td>string</td>
<td>Organization unit on the certificate.</td>
</tr>
<tr>
<td>.. city</td>
<td>string</td>
<td>City on the certificate.</td>
</tr>
<tr>
<td>.. state</td>
<td>string</td>
<td>State on the certificate.</td>
</tr>
<tr>
<td>.. country</td>
<td>string</td>
<td>Country on the certificate.</td>
</tr>
<tr>
<td>.. sanCount</td>
<td>string</td>
<td>Number of subject alternative names on the certificate.</td>
</tr>
<tr>
<td>.. publicKeyAlgo</td>
<td>string</td>
<td>Encryption algorithm for the certificate's public key.</td>
</tr>
<tr>
<td>.. san</td>
<td>string</td>
<td>Subject alternative names on the certificate.</td>
</tr>
<tr>
<td>.. certRating</td>
<td>string</td>
<td><a href="https://dev.digicert.com/md/certcentral-apis/services-api/glossary.md#section-idm33288526639892">Certificate security rating</a>, based on industry standards and the certificate's settings.</td>
</tr>
<tr>
<td>.. tags</td>
<td>string</td>
<td>Custom tags added by certificate owner, subscriber, or other admin.</td>
</tr>
<tr>
<td>.. certStatusError</td>
<td>string</td>
<td>Errors retrieving certificate status.</td>
</tr>
<tr>
<td>.. certIssues</td>
<td>string</td>
<td>Chart data for certificate issues.</td>
</tr>
<tr>
<td>.. renewalEmailPreference</td>
<td>boolean</td>
<td>Whether renewal email preference is enabled or not.<strong>Default: <code>true</code></strong></td>
</tr>
<tr>
<td>.. emailAddresses</td>
<td>string</td>
<td>Email address for the contact associated with the certificate.</td>
</tr>
<tr>
<td>.. actions</td>
<td>object</td>
<td>Action performed on the certificate.</td>
</tr>
<tr>
<td>.. filePath</td>
<td>string</td>
<td>File path of the certificate.<br>Values are comma-separated.</td>
</tr>
<tr>
<td>.. source</td>
<td>string</td>
<td>The scan used to identify the certificate.<br><strong>Possible values: <code>sensor</code></strong>, <strong><code>agent</code></strong><br><strong>Note:</strong>Possible values are<strong><code>Manual Upload</code></strong>, <strong><code>Cloud scan</code></strong> for server certificates.</td>
</tr>
<tr>
<td>.. serverHost</td>
<td>string</td>
<td>The server host associated with the certificate.<br>Values are comma-separated.</td>
</tr>
<tr>
<td>.. selfSignedCaOptIn</td>
<td>boolean</td>
<td>Whether email preference enabled for the self-signed certificates.</td>
</tr>
<tr>
<td>.. systemCert</td>
<td>boolean</td>
<td>Whether any system certificates are available or not.</td>
</tr>
</tbody>
</table>