---
title: "Get CT logs (order ID)"
source_url: https://dev.digicert.com/certcentral-apis/services-api/ct-log-monitoring/get-ct-logs-order-id.html
api_method: GET
api_endpoint: "/services/v2/ctmonitor/{{order_id}}/details"
api_url: "https://www.digicert.com/services/v2/ctmonitor/{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000"
---

**GET** `https://www.digicert.com/services/v2/ctmonitor/{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000`

Use this endpoint to get the CT logs for the domains on a Secure Site Pro certificate using the certificate's order ID.

## Example requests and response

**cURL**

```bash
curl -X GET \
  'https://www.digicert.com/services/v2/ctmonitor/{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000' \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}'
```

**Python**

```python
import requests

url = "https://www.digicert.com/services/v2/ctmonitor/{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000"

payload = ""
headers = {
    'X-DC-DEVKEY': "{{api_key}}",
    'Content-Type': "application/json"
    }

response = requests.request("GET", url, data=payload, headers=headers)

print(response.text)
```

**Go**

```go
package main

import (
	"fmt"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://www.digicert.com/services/v2/ctmonitor/{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-DC-DEVKEY", "{{api_key}}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

**NodeJS**

```javascript
var request = require("request");

var options = { method: 'GET',
  url: 'https://www.digicert.com/services/v2/ctmonitor/{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000',
  headers: 
   { 'Content-Type': 'application/json',
     'X-DC-DEVKEY': '{{api_key}}' } };

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});
```


## 200 OK

```json
{
    "ct_certificates": [
        {
            "serial": "3aba0c39ed",
            "digicert_issued": false,
            "ctlogs": [
                {
                    "logged_on": "2020 Apr 06 | 11:37:33",
                    "entry_no": 0,
                    "log_name": "Google 'Xenon2020' log",
                    "operated_by": "Google",
                    "log_url": "ct.googleapis.com/logs/xenon2020"
                },
                {
                    "logged_on": "2020 Apr 06 | 11:37:33",
                    "entry_no": 0,
                    "log_name": "Let's Encrypt 'Oak2020' log",
                    "operated_by": "Let's Encrypt",
                    "log_url": "oak.ct.letsencrypt.org/2020"
                }
            ],
            "not_after": "05 Jul 2020",
            "not_before": "06 Apr 2020",
            "subject": "digiqatest.in",
            "issuer": "Let's Encrypt Authority X3",
            "precert": false,
            "hosts": {
                "hosts_in_order": [
                    "digiqatest.in"
                ],
                "hosts_not_in_order": []
            },
            "issuer_ca": "Let's Encrypt",
            "trusted_ica": false,
            "key_algorithm": "RSA",
            "key_length": 3072,
            "self_signed": false,
            "signature_algorithm": "RSAwithSHA256",
            "cert_type": "dv",
            "wildcard": false
        }
    ],
    "page": {
        "total": 1,
        "limit": 1000,
        "offset": 0
    },
    "issuer_ca_list": {
        "General": [
            "DigiCert",
            "Non-DigiCert"
        ],
        "Specific CAs": [
            "IdenTrust Services, LLC",
            "Let's Encrypt",
            "Sectigo"
        ]
    }
}
```

## Filters and URL query parameters

This endpoint supports filters, sorting, and pagination. For general information and examples of the syntax to use when applying filters and sorting results, see [Services API - Filters, sorting, and pagination parameters](https://dev.digicert.com/md/certcentral-apis/services-api.md#filters-sorting-and-pagination-parameters).

**Example:**

```bash
https://www.digicert.com/services/v2/ctmonitor/{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000
```

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>filters[<code>{{property_name}}</code>]</td>
<td>optional</td>
<td>string</td>
<td>Filters results by the specified property. Replace <code>{{property_name}}</code> in your request with the property to use for filtering. This endpoint supports filtering by the following properties:<br><ul><li><code>filters[issuer_ca]</code>: Use <code>DigiCert</code>, <code>Non-DigiCert</code> (includes all other certificate brands), or <code>{{specific brand name}}</code> (for example, <code>Let&#x27;s Encrypt</code>).</li><li><code>filters[cn_san_search]</code>: Common name or subject alternative name (SAN) to search for (partial or full).</li><li><code>filters[precert]</code>: Use <code>true</code> for precertificates or <code>false</code> for certificates.</li></ul></td>
</tr>
<tr>
<td>sort</td>
<td>optional</td>
<td>string</td>
<td>Sorts results by the value of one or more properties. By default, sorts results in ascending alphabetical order (0-9, A-Z). To sort in descending alphabetical order (9-0, Z-A), prefix the property name with a minus (<code>-</code>). To sort by multiple properties, separate the name of each property with a comma. Sort hierarchy matches the order of properties in this list. This endpoint supports sorting by the following properties:<br><ul><li><code>notbefore</code></li><li><code>notafter</code></li><li><code>untrusted_ica</code></li><li><code>pem_cn</code></li></ul></td>
</tr>
<tr>
<td>offset</td>
<td>optional</td>
<td>int</td>
<td>Index of the first result to include in the response.<br>Default: 0</td>
</tr>
<tr>
<td>limit</td>
<td>optional</td>
<td>int</td>
<td>Total number of results to include in the response.<br>Max: 1000</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>ct_certificates</td>
<td>array</td>
<td>Details about the certificate.</td>
</tr>
<tr>
<td>.. serial</td>
<td>string</td>
<td>Serial number assigned to the certificate on issuance.</td>
</tr>
<tr>
<td>.. ctlogs</td>
<td>array</td>
<td>Details from CT logs.</td>
</tr>
<tr>
<td>.. .. logged_on</td>
<td>string</td>
<td>Timestamp of when the certificate was logged to CT log.<br>Format: UTC timezone and ISO 8601 date.</td>
</tr>
<tr>
<td>.. .. entry_no</td>
<td>string</td>
<td>Reference ID of CT log from the CT log server.</td>
</tr>
<tr>
<td>.. . log_name</td>
<td>string</td>
<td>Name of the CT log server.</td>
</tr>
<tr>
<td>.. .. operated_by</td>
<td>string</td>
<td>Owner of CT log server.</td>
</tr>
<tr>
<td>.. .. log_url</td>
<td>string</td>
<td>URL of CT log server.</td>
</tr>
<tr>
<td>.. digicert_issued</td>
<td>bool</td>
<td>If the certificate was issued by DigiCert.<br>Possible values:<br><ul><li>true: issued by DigiCert</li><li>false: issued by another certificate authority</li></ul></td>
</tr>
<tr>
<td>.. not_after</td>
<td>string</td>
<td>Timestamp of when certificate validity ends.<br>Format: UTC timezone and ISO 8601 date.</td>
</tr>
<tr>
<td>.. not_before</td>
<td>string</td>
<td>Timestamp of when certificate validity begins.<br>Format: UTC timezone and ISO 8601 date.</td>
</tr>
<tr>
<td>.. subject</td>
<td>string</td>
<td>Name secured by the certificate.</td>
</tr>
<tr>
<td>.. issuer</td>
<td>string</td>
<td>Name of certificate authority that issued the certificate.</td>
</tr>
<tr>
<td>.. precert</td>
<td>bool</td>
<td>Is the certificate in the CT log a precertificate.<br>Possible values:<br><ul><li>true: precertificate</li><li>false: certificate</li></ul><br>Only returned if the precert request filter is used.</td>
</tr>
<tr>
<td>.. issuer_ca</td>
<td>string</td>
<td>Brand name of issuing certificate authority. Only returned if the issuer_ca request filter is used.</td>
</tr>
<tr>
<td>.. trusted_ica</td>
<td>bool</td>
<td>If the issuing certificate authority (ICA) is DigiCert or is whitelisted.<br>Possible values:<br><ul><li>true: DigiCert/whitelisted ICA</li><li>false: untrusted ICA</li></ul></td>
</tr>
<tr>
<td>.. key_algorithm</td>
<td>string</td>
<td>Type of encryption algorithm (e.g., RSA)</td>
</tr>
<tr>
<td>.. key_length</td>
<td>string</td>
<td>Number of bits used in the key.</td>
</tr>
<tr>
<td>.. self_signed</td>
<td>bool</td>
<td>If the certificate is self-signed.<br>Possible values:<br><ul><li>true: self-signed</li><li>false: not self-signed</li></ul></td>
</tr>
<tr>
<td>.. signature_algorithm</td>
<td>string</td>
<td>Signing algorithm used by the certificate.</td>
</tr>
<tr>
<td>.. cert_type</td>
<td>string</td>
<td>Type of certificate.<br>Possible values:<br><ul><li>EV</li><li>OV</li><li>DV</li></ul></td>
</tr>
<tr>
<td>.. wildcard</td>
<td>bool</td>
<td>If the certificate is a wildcard certificate.<br>Possible values:<br><ul><li>true: wildcard certificate</li><li>false: not a wildcard certificate</li></ul></td>
</tr>
<tr>
<td>.. hosts</td>
<td>object</td>
<td>List of common name or subject alternative names in the order and not in the order Only returned if the ca_san_search request filter is used.</td>
</tr>
<tr>
<td>.. .. hosts_in_order</td>
<td>array</td>
<td>Common name or subject alternative names in the certificate order</td>
</tr>
<tr>
<td>.. .. host_not_in_order</td>
<td>array</td>
<td>Common name or subject alternative names not in the certificate order</td>
</tr>
<tr>
<td>page</td>
<td>object</td>
<td>Details about results. Modified using URL query strings.</td>
</tr>
<tr>
<td>.. total</td>
<td>int</td>
<td>Total number of records.</td>
</tr>
<tr>
<td>.. limit</td>
<td>int</td>
<td>Pagination record limit</td>
</tr>
<tr>
<td>.. offset</td>
<td>int</td>
<td>Pagination starting point</td>
</tr>
<tr>
<td>Issuer_ca_list</td>
<td>array</td>
<td>List of issuing certificate authorities (ICAs)</td>
</tr>
<tr>
<td>.. General</td>
<td>object</td>
<td>DigiCert and Non-DigiCert</td>
</tr>
<tr>
<td>.. Specified CAs</td>
<td>object</td>
<td>List of other certificate authorities present for the account.</td>
</tr>
</tbody>
</table>