--- title: "Get credential details" method: POST path: "/csc/v1/credentials/info" tags: ["CSC (v1)"] --- # Get credential details `POST /csc/v1/credentials/info` ## Request - Base URL: `https://one.digicert.com/documentmanager` - URL: `https://one.digicert.com/documentmanager/csc/v1/credentials/info` - Auth: one of: - API key in header `X-API-Key` - OAuth 2 - Client credentials - Token URL: `/imauth/oauth2/token` scopes: `service` - OAuth 2 - Authorization code: `/imauth/oauth2/authorize` - Token URL: `/imauth/oauth2/token` scopes: `service` - TypeScript: (a function with typed inputs; its response is checked against the schema) Use this endpoint to get credential and identity information, certificate public key, and CA certificates for the given credential ID. `credentialID` is required in the request body. ## Request body - CredentialsInfoRequest - `certificates` string: Specifies which certificates from the certificate chain shall be returned in certs/certificates. - `lang` string: Request a preferred language according to RFC 3066. If specified, the Remote Service should return the label and drescription parameters in this launguage, if supported. If the language is not supported by the Remote Service, it should specify the default language in the output lang parameter. If omitted, the Remote Service should return these parameters in its own default language. - `clientData` string: Arbitrary data from the Signature Application. It can be used to handle a transaction identifier or other application-specific data. - `credentialID` string, required: The identifier associated to the credential. - `certInfo` boolean: Specifies if the information on the end entity certificate shall be returned as printable strings. This is useful in case the Signature Application wants to retrieve some details of the certificate without having to decode it. The default value is “false”, so if the parameter is omitted then the information will not be returned. - `authInfo` boolean: Specifies if the information on the authorization mechanisms supported by this credential (PIN and OTP groups) shall be returned. The default value is “false”, so if the parameter is omitted then the information will not be returned. ## Response `200` Credential details - CredentialsInfoResponse - `description` string: A free form description of the credential in the lang language. The maximum size of the string is 255 characters. - `authMode` string: Specifies one of the authorization modes - `lang` string: Order - `key` CredentialInfoKey - `status` string: The status of enablement of the signing key of the credential - `algo` string[]: The list of OIDs of the supported key algorithms. For example- 1.2.840.113549.1.1.1 = RSA encryption, 1.2.840.10045.4.3.2 = ECDSA with SHA256. - `len` integer: The length of the cryptographic key in bits. - `curve` string: The OID of the ECDSA curve. The value shall only be returned if keyAlgo is based on ECDSA. - `cert` CredentialInfoCert - `status` string: The status of validity of the end entity certificate. The value is optional, so the Remote Service should only return a value that is accurate and consistent with the actual validity status of the certificate at the time the response is generated. - `certificates` string[] - `issuerDN` string: The Issuer Subject Distinguished Name from the X.509v3 end entity certificate in printable string format, UTF-8encoded according to RFC 2253. This parameter shall be returned when certInfo is “true”. - `serialNumber` string: The Issuer Subject Distinguished Name from the X.509v3 end entity certificate in printable string format, UTF-8encoded according to RFC 2253. This parameter shall be returned when certInfo is “true”. - `subjectDN` string: The Distinguished Name from the X.509v3 certificate in printable string format, UTF-8-encoded according to RFC 2253. This parameter shall be returned when certInfo is “true”. - `validFrom` string, date-time: The validity start date from the X.509v3 certificate in printable string format, encoded as GeneralizedTime format (RFC 2459) (e.g. “YYYYMMDDHHMMSSZ”). This parameter shall be returned when certInfo is “true”. - `validTo` string, date-time: The validity end date from the X.509v3 certificate in printable string format, encoded as GeneralizedTime format (RFC 2459) (e.g. “YYYYMMDDHHMMSSZ”). This parameter shall be returned when certInfo is “true”. - `SCAL` string: Specifies the Sole Control Assurance Level required by the credential, as defined in CEN EN 419 241-1 - `PIN` CredentialInfoPin - `presence` string: Specifies if a text-based PIN is required or not, or optional. This parameter shall be present only when authMode is “explicit”. - `format` string: Specifies the format of the PIN - `label` string: Specifies an optional label for the data field used to collect the PIN in the user interface, in the language specified in the lang parameter. This parameter can be present only when authMode is “explicit” and PIN/presence is not “false”. - `description` string: It optionally specifies a free form description of the PIN in the language specified in the lang parameter. This parameter can be present only when authMode is “explicit” and PIN/presence is not “false”. The maximum size of the string shall be 255 characters. - `OTP` CredentialInfoOtp - `presence` string: Specifies if a text-based OTP is required or not, or optional. This parameter shall be present only when authMode is “explicit”. - `type` string: Specifies the type of the OTP - `provider` string: Optionally specifies the provider of the OTP device or application. This parameter can be present only when authMode is “explicit” and OTP/presence is not “false”. - `format` string: Specifies the data format of the OTP- • “A”- the OTP contains alphanumeric text. • “N”- the OTP contains numeric text. This parameter shall be present only when authMode is “explicit” and OTP/presence is not “false”. - `label` string: Specifies an optional label for the data field used to collect the OTP in the user interface, in the language specified in the lang parameter. This parameter can be present only when authMode is “explicit” and OTP/presence is not “false”. - `description` string: Optionally specifies a free form description of the OTP mechanism in the language specified in the lang parameter. This parameter can be present only when authMode is “explicit” and OTP/presence is not “false”. The maximum size of the string shall be 255 characters. - `ID` string: Specifies the identifier of the OTP device or application. This parameter shall be present only when authMode is “explicit” and OTP/presence is not “false”. ## Other responses - `400`: Bad Request - `401`: Unauthorized - `500`: Internal Server Error --- [API](https://skmtc.dev/digicert/apis/digicert-content-trust-manager.md) - [All operations](https://skmtc.dev/digicert/apis/digicert-content-trust-manager/llms.txt) - [OpenAPI document](https://skmtc.dev/digicert/apis/digicert-content-trust-manager/revisions/8dec322a0e2b?raw)