certificates

Get Certificate Raw

Tier-gated raw PEM retrieval by SHA-256 (GH #205).

Paid tiers only. Serves the leaf PEM from cold storage; when the bytes are absent (unbackfilled row, or dropped by the retention sweep) they are materialized on demand from crt.sh, fingerprint-verified, returned and best-effort persisted back to cold storage. chain is currently always empty with chain_available=false — CertIndex persists only leaf bytes; the field keeps the contract stable if chains are stored later.

get/v1/certificates/{sha256}/raw

Request

  • Base URL: https://api.ctindex.io
  • URL: https://api.ctindex.io/v1/certificates/{sha256}/raw
  • Auth: one of:
    • API key in header X-API-Key
    • HTTP bearer

Path parameters

sha256string required

Query parameters

include_parsed_extensionsboolean

When true (default), attach the parsed_extensions view (EKU, SAN types, basic constraints, SCT list) parsed from the returned bytes.

Cookies

ctix_sessionstring nullable

Response

Successful Response

sha256string required
raw_pemstring required
chainstring[]
chain_availableboolean
materialized_on_demandboolean

Changes

No recorded changes to this operation across all 1 revision of this API.