---
title: "View certificate rating"
source_url: https://dev.digicert.com/certcentral-apis/discovery-api/certificates/view-certificate-rating.html
api_method: POST
api_endpoint: "/apicontroller/v1/sslrating/getCertificateRating"
api_url: "https://daas.digicert.com/apicontroller/v1/sslrating/getCertificateRating"
---

**POST** `https://daas.digicert.com/apicontroller/v1/sslrating/getCertificateRating`

Get the overall security rating and known risks and issues for the certificate. This endpoint request allows an end user to drill into or cross-link to a single certificate's security rating and all elements used to determine the overall rating.

## Example requests and responses

**cURL**

```bash
curl -X POST \
  https://daas.digicert.com/apicontroller/v1/sslrating/getCertificateRating \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}' \
  -d '{
    "certId": "fb92ee3a2fd0cb6549e58c252f8787f467bfbeff",
    "accountId": "126993",
    "divisionIds": []
}'
```

**Python**

```python
import requests

url = "https://daas.digicert.com/apicontroller/v1/sslrating/getCertificateRating"

payload = "{\n    \"certId\": \"fb92ee3a2fd0cb6549e58c252f8787f467bfbeff\",\n    \"accountId\": \"126993\",\n    \"divisionIds\": []\n}"
headers = {
    'X-DC-DEVKEY': "{{api_key}}",
    'Content-Type': "application/json",
    }

response = requests.request("POST", url, data=payload, headers=headers)

print(response.text)
```

**Go**

```go
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://daas.digicert.com/apicontroller/v1/sslrating/getCertificateRating"

	payload := strings.NewReader("{\n    \"certId\": \"fb92ee3a2fd0cb6549e58c252f8787f467bfbeff\",\n    \"accountId\": \"126993\",\n    \"divisionIds\": []\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-DC-DEVKEY", "{{api_key}}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

**NodeJS**

```javascript
var request = require("request");

var options = { method: 'POST',
  url: 'https://daas.digicert.com/apicontroller/v1/sslrating/getCertificateRating',
  headers: 
   { 'Content-Type': 'application/json',
     'X-DC-DEVKEY': '{{api_key}}' },
  body: 
   { certId: 'fb92ee3a2fd0cb6549e58c252f8787f467bfbeff',
     accountId: '126993',
     divisionIds: [] },
  json: true };

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});
```


## 200 OK

```json
{
    "data": {
        "categories": [
            {
                "name": "CabForumCategory",
                "criteria": [
                    {
                        "name": "AuthorityInfoAccess",
                        "value": "",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": [
                            {
                                "name": "OCSP",
                                "value": "http://ocsp.ca.com",
                                "issues": null,
                                "colorCode": null
                            },
                            {
                                "name": "CaIssuers",
                                "value": "http://crt.url.com/RSADomainValidationSecureServerCA.crx",
                                "issues": null,
                                "colorCode": null
                            }
                        ],
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "CRLDistributionPoints",
                        "value": "http://crl.url.com/RSADomainValidationSecureServerCA.crx",
                        "issues": "null",
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "BasicConstraint",
                        "value": "Certificate Authority : No",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "ExtendedKeyUsage",
                        "value": "TLS Web Client Authentication,TLS Web Server Authentication",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "KeyUsage",
                        "value": "digitalSignature,keyEncipherment",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "CertPolicies",
                        "value": "Policy ID #1 : 1.3.6.1.4.1.6449.1.2.2.7,CPS URI : https://secure.url.com/CPS,Policy ID #2 : 2.23.140.1.2.1",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "InternalNames",
                        "value": "No",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    }
                ]
            },
            {
                "name": "CertStatusCategory",
                "criteria": [
                    {
                        "name": "IsCertValid",
                        "value": "Yes",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    }
                ]
            },
            {
                "name": "CertAttributeCategory",
                "criteria": [
                    {
                        "name": "EndEntityCertHashAlgorithmStrength",
                        "value": "SHA2 family",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "EndEntityCertKeyStrength",
                        "value": "RSA 2048",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "IsAliasMatchSAN",
                        "value": "Yes",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "CertType",
                        "value": "Domain Validation (DV)",
                        "issues": "true",
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    }
                ]
            },
            {
                "name": "KnownRisksCategory",
                "criteria": [
                    {
                        "name": "NoNullCharacterInCN",
                        "value": "Yes",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "SameKeyNotUsedInChain",
                        "value": "Yes",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "SingleCNInDN",
                        "value": "Yes",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    },
                    {
                        "name": "ValidCertContent",
                        "value": "Yes",
                        "issues": null,
                        "colorCode": null,
                        "message": null,
                        "data": null,
                        "suggestion": null,
                        "kbLink": null
                    }
                ]
            }
        ],
        "rating": "Secure",
         “ratingNotice”: “Restricted to Secure because of DV certificate. Upgrade to OV or EV certificate to improve  the rating.”,
        "isPrivateCert": false,
        "cn": "*.aparat.com",
        "certStatus": "Valid",
        "caType": "PUBLIC"
    }
}
```

## Request parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>accountId</td>
<td>required</td>
<td>string</td>
<td>Account ID.</td>
</tr>
<tr>
<td>divisionIds</td>
<td>optional</td>
<td>array</td>
<td>Division IDs.</td>
</tr>
<tr>
<td>certId</td>
<td>required</td>
<td>string</td>
<td>Unique DigiCert-generated ID for the certificate found on the endpoint. Get the certificate ID from the <a href="https://dev.digicert.com/md/certcentral-apis/discovery-api/certificates/list-certificates.md">List certificates</a> request.</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>data</td>
<td>object</td>
<td>Container.</td>
</tr>
<tr>
<td>.. categories</td>
<td>array</td>
<td>Container for assessment criteria that determines security rating.</td>
</tr>
<tr>
<td>.. .. name</td>
<td>string</td>
<td>Name of assessment category.</td>
</tr>
<tr>
<td>.. .. criteria</td>
<td>array</td>
<td>Container for details that determine security rating.</td>
</tr>
<tr>
<td>.. .. .. name</td>
<td>string</td>
<td>Assessment criteria.</td>
</tr>
<tr>
<td>.. .. .. value</td>
<td>string</td>
<td>Criteria value.</td>
</tr>
<tr>
<td>.. .. .. issues</td>
<td>string</td>
<td>Whether or not security risks exist.</td>
</tr>
<tr>
<td>.. .. .. colorCode</td>
<td>string</td>
<td>Warning level.<br><strong>Possible values:</strong> <code>1</code>=At risk (high), <code>2</code>=Warning (medium), <code>null</code>.</td>
</tr>
<tr>
<td>.. .. .. message</td>
<td>string</td>
<td>Summary.</td>
</tr>
<tr>
<td>.. .. .. data</td>
<td>array</td>
<td>Container for subcategories.</td>
</tr>
<tr>
<td>.. .. .. .. name</td>
<td>string</td>
<td>Assessment criteria.</td>
</tr>
<tr>
<td>.. .. .. .. value</td>
<td>string</td>
<td>Criteria value.</td>
</tr>
<tr>
<td>.. .. .. .. issues</td>
<td>string</td>
<td>Whether or not security risks exist.</td>
</tr>
<tr>
<td>.. .. .. .. colorCode</td>
<td>string</td>
<td>Warning level.<br><strong>Possible values:</strong> <code>1</code>=At risk (high), <code>2</code>=Warning (medium), <code>null</code>.</td>
</tr>
<tr>
<td>.. .. .. suggestion</td>
<td>string</td>
<td>Details and/or solution.</td>
</tr>
<tr>
<td>.. .. .. kbLink</td>
<td>string</td>
<td>Link to additional information.</td>
</tr>
<tr>
<td>.. rating</td>
<td>string</td>
<td><a href="https://dev.digicert.com/md/certcentral-apis/services-api/glossary.md#section-idm33288526639892">Certificate security rating</a>, based on industry standards and the certificate's settings.</td>
</tr>
<tr>
<td>.. ratingNotice</td>
<td>string</td>
<td>Additional notes regarding certificate security rating.</td>
</tr>
<tr>
<td>.. isPrivateCert</td>
<td>bool</td>
<td>Whether or not certificate is issued from private root CA.</td>
</tr>
<tr>
<td>.. cn</td>
<td>string</td>
<td>Common name.</td>
</tr>
<tr>
<td>.. certStatus</td>
<td>string</td>
<td><a href="https://dev.digicert.com/md/certcentral-apis/services-api/glossary.md#section-idm33288526595054">Status</a> of the certificate.</td>
</tr>
<tr>
<td>.. caType</td>
<td>string</td>
<td>Type of Certificate Authority source, such as public or private.</td>
</tr>
</tbody>
</table>