Get host history for a certificate
Retrieve the historical observations of hosts associated with a certificate. Use this endpoint to see every host that has presented a given certificate over time, so you can build a timeline and find other infrastructure using it.<br><br>Certificate history is also visible to Adversary Investigation users in the Platform UI on the certificate timeline.<br><br>You can define a specific time frame of interest. If you do not specify a time frame, this endpoint will search the historical dataset that is available to your account.<br><br>For workspaces with a history limit, the API returns observation ranges that overlap the allowed history window. The window starts at 00:00 UTC the allowed number of days ago and ends at the time of the request. Ranges are returned in full, with their original start and end times, even if they extend outside the window.<br><br>You may also filter results by port and transport protocol.<br><br>This endpoint is available to organizations that have access to the Adversary Investigation module. This endpoint costs one credit per page of results.
Request
- Base URLhttps://api.platform.censys.io
- URLhttps://api.platform.censys.io/v3/threat-hunting/certificate/{certificate_id}/observations/hosts
- AuthHTTP bearer
Path parameters
SHA-256 hash of the certificate
Query parameters
The ID of a Censys organization to associate the request with. See the Getting Started docs for more information.
Only show ranges ending at or after this time (ISO 8601)
Only show ranges starting at or before this time (ISO 8601)
The port to filter by
The application protocol to filter by
Pagination token from previous response to retrieve next page of results
Number of results per page. Maximum 100, defaults to 100 if not specified
Headers
The ID of a Censys organization to associate the request with. See the Getting Started docs for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.
Response
A list of host observations for the certificate
Changes
No recorded changes to this operation across all 2 revisions of this API.