---
title: "GET /certificates(thumbprintAlgorithm={thumbprintAlgorithm},thumbprint={thumbprint})"
method: GET
path: "/certificates(thumbprintAlgorithm={thumbprintAlgorithm},thumbprint={thumbprint})"
tags: ["Certificates"]
---

# GET /certificates(thumbprintAlgorithm={thumbprintAlgorithm},thumbprint={thumbprint})

`GET /certificates(thumbprintAlgorithm={thumbprintAlgorithm},thumbprint={thumbprint})`

Gets information about the specified certificate.

## Path parameters

- `thumbprintAlgorithm` string, required
- `thumbprint` string, required

## Query parameters

- `$select` string
- `timeout` integer
- `api-version` string, required

## Headers

- `client-request-id` string, uuid
- `return-client-request-id` boolean
- `ocp-date` string, date-time-rfc1123

## Response `200`

A response containing the certificate.

- Certificate — A certificate that can be installed on compute nodes and can be used to authenticate operations on the machine.
  - `thumbprint` string
  - `thumbprintAlgorithm` string
  - `url` string
  - `state` 'active' | 'deleting' | 'deleteFailed' — Values are: active - The certificate is available for use in pools. deleting - The user has requested that the certificate be deleted, but the delete operation has not yet completed. You may not reference the certificate when creating or updating pools. deletefailed - The user requested that the certificate be deleted, but there are pools that still have references to the certificate, or it is still installed on one or more compute nodes. (The latter can occur if the certificate has been removed from the pool, but the node has not yet restarted. Nodes refresh their certificates only when they restart.) You may use the cancel certificate delete operation to cancel the delete, or the delete certificate operation to retry the delete.
  - `stateTransitionTime` string, date-time
  - `previousState` 'active' | 'deleting' | 'deleteFailed' — Values are: active - The certificate is available for use in pools. deleting - The user has requested that the certificate be deleted, but the delete operation has not yet completed. You may not reference the certificate when creating or updating pools. deletefailed - The user requested that the certificate be deleted, but there are pools that still have references to the certificate, or it is still installed on one or more compute nodes. (The latter can occur if the certificate has been removed from the pool, but the node has not yet restarted. Nodes refresh their certificates only when they restart.) You may use the cancel certificate delete operation to cancel the delete, or the delete certificate operation to retry the delete.
  - `previousStateTransitionTime` string, date-time — This property is not set if the certificate is in its initial Active state.
  - `publicData` string
  - `deleteCertificateError` DeleteCertificateError
    - `code` string
    - `message` string
    - `values` NameValuePair[] — This list includes details such as the active pools and nodes referencing this certificate. However, if a large number of resources reference the certificate, the list contains only about the first hundred.
      - `name` string
      - `value` string

## Other responses

- `default` — The error from the Batch service.

---

[API](https://skmtc.dev/azure/apis/batch-batch.md) · [All operations](https://skmtc.dev/azure/apis/batch-batch/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/azure/batch-batch/revisions/c132dc281e07/schema)
