---
title: "Approve an observed certificate as known-good"
method: POST
path: "/v1/high-assurance/known-good/approve"
tags: ["high-assurance"]
---

# Approve an observed certificate as known-good

`POST /v1/high-assurance/known-good/approve`

## Request

- Base URL: `https://api.ctindex.io`
- URL: `https://api.ctindex.io/v1/high-assurance/known-good/approve`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

Marks an already-observed certificate (by SHA-256) as known-good for the domain. Any open case for that (domain, cert) is resolved as ``approved_known_good``.

## Cookies

- `ctix_session` string, nullable

## Request body

- ApproveObservedRequest: Request body for POST /v1/high-assurance/known-good/approve. Marks an already-observed certificate (by SHA-256) as known-good for a domain. If an open case exists for that (domain, cert), it is resolved.
  - `domain` string, required
  - `sha256` string, required
  - `note` string, nullable

## Response `201`

Successful Response

- KnownGoodCertResponse
  - `id` string, uuid, required
  - `domain` string, required
  - `sha256` string, required
  - `cert_id` integer, nullable
  - `source` string
  - `note` string, nullable
  - `created_at` string, date-time, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/ctindex/apis/certindex-api.md) · [All operations](https://skmtc.dev/ctindex/apis/certindex-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ctindex/apis/certindex-api/revisions/d5bc0ec85bc9?raw)