---
title: "List signing certificates"
method: GET
path: "/appsec/7.0/apple/certificates"
tags: ["Certificates"]
---

# List signing certificates

`GET /appsec/7.0/apple/certificates`

## Response `200`

The caller's certificates

- CertDTO[]
  - `id` integer
  - `appleCertId` string, nullable — Apple's /v1/certificates resource id.
  - `certificateType` string
  - `displayName` string, nullable
  - `serialNumber` string, nullable
  - `expiresAt` integer, nullable — Expiry in epoch millis (from the X.509 notAfter).
  - `status` 'ACTIVE' | 'REVOKED' | 'EXPIRED'
  - `privateKeyPresent` boolean — True if we hold the private key (a .p12 can be downloaded); false for imported/reconciled certs.

## Other responses

- `403` — Caller is anonymous / not authenticated.

---

[API](https://skmtc.dev/codenameone/apis/codename-one-apple-signing-service.md) · [All operations](https://skmtc.dev/codenameone/apis/codename-one-apple-signing-service/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/codenameone/codename-one-apple-signing-service/revisions/f0b48d0af96f/schema)
