---
title: "Retrieve the active certificate"
method: GET
path: "/companies/{company}/verifactu/certificates/active"
tags: ["VeriFactu"]
---

# Retrieve the active certificate

`GET /companies/{company}/verifactu/certificates/active`

## Request

- Base URL: `https://api.factuarea.com/v1`
- URL: `https://api.factuarea.com/v1/companies/{company}/verifactu/certificates/active`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

Return the currently active FNMT certificate used to sign VeriFactu transmissions. Returns 404 if no certificate has been uploaded yet.

## Path parameters

- `company` string, uuid, required

## Headers

- `Factuarea-Version` string, date

## Response `200`

- object
  - `data` CompanyCertificate, required: Metadata of an FNMT (PKCS#12) certificate used to sign VeriFactu transmissions. The certificate password and binary are never exposed — only X.509 metadata.
    - `id` string, required: UUID v7 of the certificate.
    - `object` 'verifactu_certificate', required
    - `subject_nif` string, required: Tax ID (NIF) of the X.509 certificate holder.
    - `subject_name` string, required: Name of the certificate holder.
    - `subject_kind` string, required: Type of holder (individual / legal entity / representative).
    - `valid_from` string, date-time, required: Certificate validity start date.
    - `valid_to` string, date-time, required: Certificate validity end date (expiration).
    - `is_active` boolean, required: Whether this is the active certificate used to sign transmissions.
    - `revoked_at` string, date-time, nullable, required: Revocation date, or `null` if not revoked.
    - `created_at` string, date-time, required: Date the certificate was uploaded.

## Other responses

- `400`: `parameter_unknown` with `subcode` `retired_active_profile_header`: the retired `X-Active-Profile` header was sent; the company goes in the path. `parameter_invalid_format` on `Factuarea-Version`: the header is not a `YYYY-MM-DD` date. `unsupported_api_version`: the `Factuarea-Version` date is not a supported version.
- `401`: Missing or invalid API key.
- `403`: The request is authenticated but not allowed: the API key lacks the required scope (`insufficient_scope`), the plan does not include the public API or this feature (`addon_not_active`, `feature_not_available_in_plan`), or the module is not available with a test key (`module_not_available_in_sandbox`).
- `404`: The requested resource does not exist or belongs to another company. `profile_not_found`: the company in the path does not exist, is not in the API key scope or belongs to the other environment (live or test).
- `429`: Rate limit exceeded. Retry after the duration in `Retry-After`.
- `500`: Unexpected server error.

---

[API](https://skmtc.dev/factuarea/apis/factuarea-public-api.md) · [All operations](https://skmtc.dev/factuarea/apis/factuarea-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/factuarea/apis/factuarea-public-api/revisions/718e77934422?raw)