---
title: "Details"
method: GET
path: "/certificate/{fingerprint_sha256}"
tags: ["SSL/TLS Certificates"]
---

# Details

`GET /certificate/{fingerprint_sha256}`

Returns the current data about the given certificate.

## Path parameters

- `fingerprint_sha256` string, required

## Response `200`

Operation successful

- CertResponse
  - `data` CertResponseData
    - `items` Certificate[]
      - `fingerprint_sha256` string — The SHA256 fingerprint of the certificate.
      - `parsed` CertParsed — The parsed object of the certificate
        - `extensions` CertParsedExtensions
          - `authority_info_access` CertParsedExtensionsAuthorityInfoAccess
            - `issuer_urls` string[]
            - `ocsp_urls` string[]
          - `authority_key_id` string
          - `basic_constraints` CertParsedExtensionsBasicConstraints
            - `is_ca` boolean
            - `max_path_len` boolean
          - `certificate_policies` CertParsedExtensionsCertPolicies[]
            - `cps` string[]
            - `id` string
            - `user_notice` ExtensionsCertPoliciesUserNotice[]
              - …
          - `crl_distribution_points` string[]
          - `extended_key_usage` CertParsedExtensionsExtendedKeyUsage
            - `any` boolean
            - `apple_ichat_encryption` boolean
            - `apple_ichat_signing` boolean
            - `apple_system_identity` boolean
            - `client_auth` boolean
            - `code_signing` boolean
            - `dvcs` boolean
            - `eap_over_lan` boolean
            - `eap_over_ppp` boolean
            - `email_protection` boolean
            - `ipsec_end_system` boolean
            - `ipsec_intermediate_system_usage` boolean
            - `ipsec_tunnel` boolean
            - `ipsec_user` boolean
            - `microsoft_ca_exchange` boolean
            - `microsoft_cert_trust_list_signing` boolean
            - `microsoft_document_signing` boolean
            - `microsoft_drm` boolean
            - `microsoft_efs_recovery` boolean
            - `microsoft_embedded_nt_crypto` boolean
            - `microsoft_encrypted_file_system` boolean
            - `microsoft_enrollment_agent` boolean
            - `microsoft_kernel_mode_code_signing` boolean
            - `microsoft_key_recovery_21` boolean
            - `microsoft_key_recovery_3` boolean
            - `microsoft_lifetime_signing` boolean
            - `microsoft_nt5_crypto` boolean
            - `microsoft_oem_whql_crypto` boolean
            - `microsoft_qualified_subordinate` boolean
            - `microsoft_root_list_signer` boolean
            - `microsoft_server_gated_crypto` boolean
            - `microsoft_smartcard_logon` boolean
            - `microsoft_system_health` boolean
            - `microsoft_timestamp_signing` boolean
            - `microsoft_whql_crypto` boolean
            - `sbgp_cert_aa_service_auth` boolean
            - `server_auth` boolean
            - `time_stamping` boolean
          - `issuer_alt_name` CertIssuerAltName
            - `directory_names` CertIssuerAltNameDirectoryNames[]
              - …
            - `dns_names` string[]
            - `email_addresses` string[]
            - `ip_addresses` string[]
            - `other_names` CertAltNameOtherNames[]
              - …
            - `registered_ids` string[]
            - `uniform_resource_identifiers` string[]
          - `key_usage` CertParsedExtensionsKeyUsage
            - `certificate_sign` boolean
            - `content_commitment` boolean
            - `crl_sign` boolean
            - `data_encipherment` boolean
            - `decipher_only` boolean
            - `digital_signature` boolean
            - `encipher_only` boolean
            - `key_agreement` boolean
            - `key_encipherment` boolean
            - `value` integer
          - `name_constraints` CertParsedExtensionsNameConstraints[]
            - `critical` boolean
            - `permitted_email_addresses` string[]
            - `permitted_names` string[]
          - `signed_certificate_timestamps` SignedCertificateTimestamps[]
            - `log_id` string
            - `signature` string
            - `timestamp` integer
            - `version` integer
          - `subject_alt_name` CertParsedExtensionsSubjectAltName
            - `directory_names` CertSubjectAltNameDirectoryNames[]
              - …
            - `dns_names` string[]
            - `email_addresses` string[]
            - `ip_addresses` string[]
            - `other_names` CertAltNameOtherNames[]
              - …
            - `registered_ids` string[]
            - `uniform_resource_identifiers` string[]
          - `subject_key_id` string
        - `fingerprint_md5` string
        - `fingerprint_sha1` string
        - `fingerprint_sha256` string
        - `issuer` CertParsedIssuer
          - `common_name` string[]
          - `country` string[]
          - `domain_component` string[]
          - `email_address` string[]
          - `given_name` string[]
          - `jurisdiction_country` string[]
          - `jurisdiction_locality` string[]
          - `jurisdiction_province` string[]
          - `locality` string[]
          - `organization` string[]
          - `organizational_unit` string[]
          - `postal_code` string[]
          - `province` string[]
          - `serial_number` string[]
          - `street_address` string[]
          - `surname` string[]
        - `issuer_dn` string
        - `names` string[]
        - `redacted` boolean
        - `serial_number` string
        - `signature` CertParsedSignature
          - `self_signed` boolean
          - `signature_algorithm` CertParsedSignatureAlgorithm
            - `name` string
            - `oid` string
          - `valid` boolean
          - `value` string
        - `signature_algorithm` CertParsedSignatureAlgorithm
          - `name` string
          - `oid` string
        - `spki_subject_fingerprint` string
        - `subject` CertParsedSubject
          - `common_name` string[]
          - `country` string[]
          - `domain_component` string[]
          - `email_address` string[]
          - `given_name` string[]
          - `jurisdiction_country` string[]
          - `jurisdiction_locality` string[]
          - `jurisdiction_province` string[]
          - `locality` string[]
          - `organization` string[]
          - `organizational_unit` string[]
          - `postal_code` string[]
          - `province` string[]
          - `serial_number` string[]
          - `street_address` string[]
          - `surname` string[]
        - `subject_dn` string
        - `subject_key_info` CertParsedSubjectKeyInfo
          - `ecdsa_public_key` EcdsaPublicKey
            - `b` string
            - `curve` string
            - `gx` string
            - `gy` string
            - `length` integer
            - `n` string
            - `p` string
            - `pub` string
            - `x` string
            - `y` string
          - `fingerprint_sha256` string
          - `key_algorithm` KeyAlgorithm
            - `name` string
          - `rsa_public_key` RSAPublicKey
            - `exponent` integer
            - `length` integer
            - `modulus` string
        - `tbs_fingerprint` string
        - `tbs_noct_fingerprint` string
        - `validation_level` string
        - `validity` CertParsedValidity
          - `end` string, date-time
          - `length` integer
          - `start` string, date-time
          - `status` string
        - `version` integer
      - `raw` string — The raw certificate.
      - `updated_at` string, date-time — Timestamp when the certificate information was updated last time.
      - `validation` Validation
        - `is_valid` boolean — True if the certificate is valid, otherwise False.
        - `reason` string — The reason why certificate is invalid. In case if certificate is valid the line is empty.

## Other responses

- `401` — Unauthorized
- `500` — Internal server error

---

[API](https://skmtc.dev/spyse/apis/data-api.md) · [All operations](https://skmtc.dev/spyse/apis/data-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/spyse/data-api/revisions/fd05b83ed2c5/schema)