---
title: "Retrieve the active X.509 RSA certificate for the Repository."
method: GET
path: "/repos/{owner}/{identifier}/x509-rsa/"
tags: ["repos"]
---

# Retrieve the active X.509 RSA certificate for the Repository.

`GET /repos/{owner}/{identifier}/x509-rsa/`

Retrieve the active X.509 RSA certificate for the Repository.

## Response `200`

Retrieved the active X.509 RSA Certificate.

- RepositoryX509RsaCertificate
  - `active` boolean — If selected this is the active key for this repository.
  - `certificate` string, nullable — The issued certificate.
  - `certificate_chain` string, nullable — Base64 encoded CA certificate chain.
  - `certificate_chain_fingerprint` string
  - `certificate_chain_fingerprint_short` string
  - `certificate_fingerprint` string, nullable — The SHA-256 long identifier used
  - `certificate_fingerprint_short` string
  - `created_at` string, date-time
  - `default` boolean — If selected this is the default key for this repository.
  - `issuing_status` 'Certificate is pending to be issued' | 'Certificate successfully issued' | 'Error issuing certificate'

## Other responses

- `400` — Request could not be processed (see detail).
- `422` — Missing or invalid parameters (see detail).

---

[API](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1.md) · [All operations](https://skmtc.dev/cloudsmith/apis/cloudsmith-api-v1/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cloudsmith/cloudsmith-api-v1/revisions/4d7879df9b2f/schema)