Get CT logs (order ID)

GET{{order_id }}/details?offset=0&limit=1000

Use this endpoint to get the CT logs for the domains on a Secure Site Pro certificate using the certificate's order ID.

Example requests and response

curl -X GET \
  '{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000' \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}'
import requests

url = "{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000"

payload = ""
headers = {
    'X-DC-DEVKEY': "{{api_key}}",
    'Content-Type': "application/json"

response = requests.request("GET", url, data=payload, headers=headers)

package main

import (

func main() {

	url := "{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-DC-DEVKEY", "{{api_key}}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)


var request = require("request");

var options = { method: 'GET',
  url: '{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000',
   { 'Content-Type': 'application/json',
     'X-DC-DEVKEY': '{{api_key}}' } };

request(options, function (error, response, body) {
  if (error) throw new Error(error);

200 OK
    "ct_certificates": [
            "serial": "3aba0c39ed",
            "digicert_issued": false,
            "ctlogs": [
                    "logged_on": "2020 Apr 06 | 11:37:33",
                    "entry_no": 0,
                    "log_name": "Google 'Xenon2020' log",
                    "operated_by": "Google",
                    "log_url": ""
                    "logged_on": "2020 Apr 06 | 11:37:33",
                    "entry_no": 0,
                    "log_name": "Let's Encrypt 'Oak2020' log",
                    "operated_by": "Let's Encrypt",
                    "log_url": ""
            "not_after": "05 Jul 2020",
            "not_before": "06 Apr 2020",
            "subject": "",
            "issuer": "Let's Encrypt Authority X3",
            "precert": false,
            "hosts": {
                "hosts_in_order": [
                "hosts_not_in_order": []
            "issuer_ca": "Let's Encrypt",
            "trusted_ica": false,
            "key_algorithm": "RSA",
            "key_length": 3072,
            "self_signed": false,
            "signature_algorithm": "RSAwithSHA256",
            "cert_type": "dv",
            "wildcard": false
    "page": {
        "total": 1,
        "limit": 1000,
        "offset": 0
    "issuer_ca_list": {
        "General": [
        "Specific CAs": [
            "IdenTrust Services, LLC",
            "Let's Encrypt",

Filters and URL query parameters

This endpoint supports filters, sorting, and pagination. For general information and examples of the syntax to use when applying filters and sorting results, see Services API - Filters, sorting, and pagination parameters.


bash{{order_id}}/details?filters[cn_san_search]=&filters[issuer_ca]={{name of certificate authority}}&filters[precert]=false&sort=-notbefore&offset=0&limit=1000
Name Req/Opt Type Description
filters[{{property_name}}] optional string Filters results by the specified property.

Replace {{property_name}} in your request with the property to use for filtering. This endpoint supports filtering by the following properties:
  • filters[issuer_ca] - Use DigiCert, Non-DigiCert (includes all other certificate brands), or {{specific brand name}} (for example, Let's Encrypt).
  • filters[cn_san_search] - Common name or subject alternative name (SAN) to search for (partial or full).
  • filters[precert] - Use true for precertificates or false for certificates.
sort optional string Sorts results by the value of one or more properties.

By default, sorts results in ascending alphabetical order (0-9, A-Z). To sort in descending alphabetical order (9-0, Z-A), prefix the property name with a minus (-).

To sort by multiple properties, separate the name of each property with a comma. Sort hierarchy matches the order of properties in this list.

This endpoint supports sorting by the following properties:
  • notbefore
  • notafter
  • untrusted_ica
  • pem_cn
offset required int Index of the first result to include in the response.
Default: 0
limit required int Total number of results to include in the response.
Max: 1000

Response parameters

Name Type Description
ct_certificates array Details about the certificate.
.. serial string Serial number assigned to the certificate on issuance.
.. ctlogs array Details from CT logs.
.. .. logged_on string Timestamp of when the certificate was logged to CT log.
Format: UTC timezone and ISO 8601 date.
.. .. entry_no string Reference ID of CT log from the CT log server.
.. :. log_name string Name of the CT log server.
.. .. operated_by string Owner of CT log server.
.. .. log_url string URL of CT log server.
.. digicert_issued bool If the certificate was issued by DigiCert.
Possible values:
  • true: issued by DigiCert
  • false: issued by another certificate authority
.. not_after string Timestamp of when certificate validity ends.
Format: UTC timezone and ISO 8601 date.
.. not_before string Timestamp of when certificate validity begins.
Format: UTC timezone and ISO 8601 date.
.. subject string Name secured by the certificate.
.. issuer string Name of certificate authority that issued the certificate.
.. precert bool Is the certificate in the CT log a precertificate.
Possible values:
  • true: precertificate
  • false: certificate
Only returned if the precert request filter is used.
.. issuer_ca string Brand name of issuing certificate authority.
Only returned if the issuer_ca request filter is used.
.. trusted_ica bool If the issuing certificate authority (ICA) is DigiCert or is whitelisted.
Possible values:
  • true: DigiCert/whitelisted ICA
  • false: untrusted ICA
.. key_algorithm string Type of encryption algorithm (e.g., RSA)
.. key_length string Number of bits used in the key.
.. self_signed bool If the certificate is self-signed.
Possible values:
  • true: self-signed
  • false: not self-signed
.. signature_algorithm string Signing algorithm used by the certificate.
.. cert_type string Type of certificate.
Possible values:
  • EV
  • OV
  • DV
.. wildcard bool If the certificate is a wildcard certificate.
Possible values:
  • true: wildcard certificate
  • false: not a wildcard certificate
.. hosts object List of common name or subject alternative names in the order and not in the order
Only returned if the ca_san_search request filter is used.
.. .. hosts_in_order array Common name or subject alternative names in the certificate order
.. .. host_not_in_order array Common name or subject alternative names not in the certificate order
page object Details about results.
Modified using URL query strings.
.. total int Total number of records.
.. limit int Pagination record limit
.. offset int Pagination starting point
Issuer_ca_list array List of issuing certificate authorities (ICAs)
.. General object DigiCert and Non-DigiCert
.. Specified CAs object List of other certificate authorities present for the account.