---
title: "GET /api/v1/cert-manager/certificate-profiles/slug/{slug}"
method: GET
path: "/api/v1/cert-manager/certificate-profiles/slug/{slug}"
tags: ["PKI Certificate Profiles"]
---

# GET /api/v1/cert-manager/certificate-profiles/slug/{slug}

`GET /api/v1/cert-manager/certificate-profiles/slug/{slug}`

## Request

- Base URL: `https://us.infisical.com`
- URL: `https://us.infisical.com/api/v1/cert-manager/certificate-profiles/slug/{slug}`
- Auth: none declared

## Path parameters

- `slug` string, required

## Response `200`

Default Response

- object
  - `certificateProfile` object, required
    - `id` string, uuid, required
    - `caId` string, uuid, nullable
    - `certificatePolicyId` string, uuid, required
    - `slug` string, required
    - `description` string, nullable
    - `enrollmentType` string, required
    - `estConfigId` string, uuid, nullable
    - `apiConfigId` string, uuid, nullable
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `acmeConfigId` string, uuid, nullable
    - `issuerType` string
    - `externalConfigs` union
      - object
        - `template` string, required: Certificate template name for Azure AD CS
      - object
        - `template` string, required: Certificate template name for Active Directory Certificate Service
      - object
      - object
      - object
      - object
      - object
      - object
      - object
    - `defaults` object, nullable
      - `ttlDays` number
      - `commonName` string
      - `keyAlgorithm` 'RSA_2048' | 'RSA_3072' | 'RSA_4096' | 'EC_prime256v1' | 'EC_secp384r1' | 'EC_secp521r1' | 'ML-DSA-44' | 'ML-DSA-65' | 'ML-DSA-87' | 'SLH-DSA-SHA2-128f' | 'SLH-DSA-SHA2-128s' | 'SLH-DSA-SHA2-192f' | 'SLH-DSA-SHA2-192s' | 'SLH-DSA-SHA2-256f' | 'SLH-DSA-SHA2-256s' | 'SLH-DSA-SHAKE-128f' | 'SLH-DSA-SHAKE-128s' | 'SLH-DSA-SHAKE-192f' | 'SLH-DSA-SHAKE-192s' | 'SLH-DSA-SHAKE-256f' | 'SLH-DSA-SHAKE-256s'
      - `signatureAlgorithm` 'RSA-SHA256' | 'RSA-SHA384' | 'RSA-SHA512' | 'ECDSA-SHA256' | 'ECDSA-SHA384' | 'ECDSA-SHA512' | 'ML-DSA-44' | 'ML-DSA-65' | 'ML-DSA-87' | 'SLH-DSA-SHA2-128f' | 'SLH-DSA-SHA2-128s' | 'SLH-DSA-SHA2-192f' | 'SLH-DSA-SHA2-192s' | 'SLH-DSA-SHA2-256f' | 'SLH-DSA-SHA2-256s' | 'SLH-DSA-SHAKE-128f' | 'SLH-DSA-SHAKE-128s' | 'SLH-DSA-SHAKE-192f' | 'SLH-DSA-SHAKE-192s' | 'SLH-DSA-SHAKE-256f' | 'SLH-DSA-SHAKE-256s'
      - `keyUsages` string[]
      - `extendedKeyUsages` string[]
      - `basicConstraints` object
        - `isCA` boolean, required
        - `pathLength` number
      - `organization` string
      - `organizationalUnit` string
      - `country` string
      - `state` string
      - `locality` string
      - `subjectAltNames` object[]
        - `type` 'dns_name' | 'ip_address' | 'email' | 'uri' | 'upn', required
        - `value` string, required
      - `domainComponents` string[]
      - `customExtensions` object[]
        - `oid` string, required
        - `label` string
        - `critical` boolean
        - `value` string
    - `scepConfigId` string, uuid, nullable

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `422`: Default Response
- `500`: Default Response

## Changes

- **2026-09-15** `838c6b7e6bb8`: 1 warning, 1 info
  - added the new `smart_card_logon` enum value to the `certificateProfile/defaults/extendedKeyUsages/items/` response property for the response status `200`
  - added the optional property `certificateProfile/defaults/customExtensions` to the response with the `200` status
- **2026-07-31** `edde28ab3c8c`: 2 warning
  - added the new `any_purpose` enum value to the `certificateProfile/defaults/extendedKeyUsages/items/` response property for the response status `200`
  - added the new `upn` enum value to the `certificateProfile/defaults/subjectAltNames/items/type` response property for the response status `200`
- **2026-07-26** `53fe4d80973f`: 1 info
  - added the optional property `certificateProfile/defaults/subjectAltNames` to the response with the `200` status
- **2026-07-21** `5dbb77aad0f5`: 1 info
  - added the optional property `certificateProfile/defaults/domainComponents` to the response with the `200` status

[Operation history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/cert-manager/certificate-profiles/slug/:slug/get.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) - [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infisical/apis/infisical-api/revisions/7f940199c899?raw)