---
title: "Get TLS intermediate CA metadata"
method: GET
path: "/api/v1/certs/{cert}.json"
---

# Get TLS intermediate CA metadata

`GET /api/v1/certs/{cert}.json`

## Request

- Base URL: `https://phishunt.io`
- URL: `https://phishunt.io/api/v1/certs/{cert}.json`
- Auth: none declared

Returns metadata (operator, root CA, key type, use case) for a TLS intermediate certificate authority, plus a live count of active phishing detections using it. Powers the `get_cert_metadata` MCP tool.

## Path parameters

- `cert` string, required

## Response `200`

Certificate intermediate metadata.

- object
  - `cert` string
  - `operator` string, nullable
  - `root_ca` string, nullable
  - `since` string, nullable
  - `key_type` string, nullable
  - `use_case` string, nullable
  - `related` string[]
  - `notes` string, nullable
  - `active_phishings` integer
  - `url` string

## Other responses

- `404`: Unknown cert intermediate - not present in phishunt's CERT_METADATA.
- `429`: Rate limited (more than 20 requests in 10 seconds from one IP). Retry after 10 seconds.

---

[API](https://skmtc.dev/phishunt/apis/phishunt-api.md) · [All operations](https://skmtc.dev/phishunt/apis/phishunt-api/llms.txt) · [OpenAPI document](https://skmtc.dev/phishunt/apis/phishunt-api/revisions/0e07c255f282?raw)