---
title: "Validate Run Certificate"
method: GET
path: "/runbooks/runs/{run_id}/certificate/validate"
tags: ["DR Runbooks"]
---

# Validate Run Certificate

`GET /runbooks/runs/{run_id}/certificate/validate`

## Request

- Base URL: `https://api.continueops.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.continueops.com/runbooks/runs/{run_id}/certificate/validate`
- Auth: API key in header `X-Runner-Key`

Recompute and verify the DR Test Certificate's integrity hash.

Returns ``valid=true`` only when:
  * The certificate JSON artifact exists for this run
  * It contains all required fields (run, summary, steps, artifacts, etc.)
  * Its claimed integrity_hash matches the SHA-256 of its canonical form
    (sorted-keys, compact-separators) when the integrity_hash field is removed

## Path parameters

- `run_id` string, required

## Response `200`

Successful Response

- CertificateValidateResponse
  - `run_id` string, uuid, required
  - `valid` boolean, required
  - `integrity_hash` string, nullable
  - `computed_hash` string, nullable
  - `issuer` string, nullable
  - `issued_at` string, date-time, nullable
  - `runbook_name` string, nullable
  - `status` string, nullable
  - `summary` object, nullable
  - `issues` string[]
  - `rfc3161` Rfc3161Status: RFC 3161 timestamp verification outcome, populated when the cert payload carries an `rfc3161` block (cert-gen v23+).
    - `present` boolean
    - `tsa` string, nullable
    - `timestamped_at` string, nullable
    - `message_imprint_match` boolean, nullable
    - `signature_valid` boolean, nullable
    - `issues` string[]

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/continueops/apis/cloud-credential-proxy.md) · [All operations](https://skmtc.dev/continueops/apis/cloud-credential-proxy/llms.txt) · [OpenAPI document](https://skmtc.dev/continueops/apis/cloud-credential-proxy/revisions/f0940e341f41?raw)