---
title: "Search"
method: POST
path: "/certificate/search"
tags: ["SSL/TLS Certificates"]
---

# Search

`POST /certificate/search`

Returns a list of certificates that matched the search query. Allows getting only the first 10,000 results. To get all results please use scroll or download API endpoints. By default, search operations, which return a list of found items, return only the first 25 items. To get a different set of items, you can use the offset and limit parameters in the request body.

## Request body

- SearchCertificateRequest
  - `limit` integer — The maximum number of items to return per page. Value must be in the range between 1 and 100.
  - `offset` integer — The offset of the item at which to begin the response. Value must be in the range between 1 and 9999.
  - `search_params` object[], required — A list of certificate attributes to filter the search results by. A comprehensive list of valid search parameters is shown in the table below.

## Response `200`

Operation successful

- CertificatesResponse
  - `data` CertificatesResponseData
    - `limit` integer — The limit used for this page of results. This will be the same as the `limit` query parameter unless it exceeded the maximum value allowed for this API endpoint.
    - `offset` integer — The offset used for this page of results. The paging is limited to the first 10,000 results for performance. To get more results please use scroll or download API endpoints.
    - `total_items` integer — The number of found matches. The value is limited to 10,000 for performance reasons. To get a precise count number please use the count API endpoint.
    - `items` Certificate[]
      - `fingerprint_sha256` string — The SHA256 fingerprint of the certificate.
      - `parsed` CertParsed — The parsed object of the certificate
        - `extensions` CertParsedExtensions
          - `authority_info_access` CertParsedExtensionsAuthorityInfoAccess
            - `issuer_urls` string[]
            - `ocsp_urls` string[]
          - `authority_key_id` string
          - `basic_constraints` CertParsedExtensionsBasicConstraints
            - `is_ca` boolean
            - `max_path_len` boolean
          - `certificate_policies` CertParsedExtensionsCertPolicies[]
            - `cps` string[]
            - `id` string
            - `user_notice` ExtensionsCertPoliciesUserNotice[]
              - …
          - `crl_distribution_points` string[]
          - `extended_key_usage` CertParsedExtensionsExtendedKeyUsage
            - `any` boolean
            - `apple_ichat_encryption` boolean
            - `apple_ichat_signing` boolean
            - `apple_system_identity` boolean
            - `client_auth` boolean
            - `code_signing` boolean
            - `dvcs` boolean
            - `eap_over_lan` boolean
            - `eap_over_ppp` boolean
            - `email_protection` boolean
            - `ipsec_end_system` boolean
            - `ipsec_intermediate_system_usage` boolean
            - `ipsec_tunnel` boolean
            - `ipsec_user` boolean
            - `microsoft_ca_exchange` boolean
            - `microsoft_cert_trust_list_signing` boolean
            - `microsoft_document_signing` boolean
            - `microsoft_drm` boolean
            - `microsoft_efs_recovery` boolean
            - `microsoft_embedded_nt_crypto` boolean
            - `microsoft_encrypted_file_system` boolean
            - `microsoft_enrollment_agent` boolean
            - `microsoft_kernel_mode_code_signing` boolean
            - `microsoft_key_recovery_21` boolean
            - `microsoft_key_recovery_3` boolean
            - `microsoft_lifetime_signing` boolean
            - `microsoft_nt5_crypto` boolean
            - `microsoft_oem_whql_crypto` boolean
            - `microsoft_qualified_subordinate` boolean
            - `microsoft_root_list_signer` boolean
            - `microsoft_server_gated_crypto` boolean
            - `microsoft_smartcard_logon` boolean
            - `microsoft_system_health` boolean
            - `microsoft_timestamp_signing` boolean
            - `microsoft_whql_crypto` boolean
            - `sbgp_cert_aa_service_auth` boolean
            - `server_auth` boolean
            - `time_stamping` boolean
          - `issuer_alt_name` CertIssuerAltName
            - `directory_names` CertIssuerAltNameDirectoryNames[]
              - …
            - `dns_names` string[]
            - `email_addresses` string[]
            - `ip_addresses` string[]
            - `other_names` CertAltNameOtherNames[]
              - …
            - `registered_ids` string[]
            - `uniform_resource_identifiers` string[]
          - `key_usage` CertParsedExtensionsKeyUsage
            - `certificate_sign` boolean
            - `content_commitment` boolean
            - `crl_sign` boolean
            - `data_encipherment` boolean
            - `decipher_only` boolean
            - `digital_signature` boolean
            - `encipher_only` boolean
            - `key_agreement` boolean
            - `key_encipherment` boolean
            - `value` integer
          - `name_constraints` CertParsedExtensionsNameConstraints[]
            - `critical` boolean
            - `permitted_email_addresses` string[]
            - `permitted_names` string[]
          - `signed_certificate_timestamps` SignedCertificateTimestamps[]
            - `log_id` string
            - `signature` string
            - `timestamp` integer
            - `version` integer
          - `subject_alt_name` CertParsedExtensionsSubjectAltName
            - `directory_names` CertSubjectAltNameDirectoryNames[]
              - …
            - `dns_names` string[]
            - `email_addresses` string[]
            - `ip_addresses` string[]
            - `other_names` CertAltNameOtherNames[]
              - …
            - `registered_ids` string[]
            - `uniform_resource_identifiers` string[]
          - `subject_key_id` string
        - `fingerprint_md5` string
        - `fingerprint_sha1` string
        - `fingerprint_sha256` string
        - `issuer` CertParsedIssuer
          - `common_name` string[]
          - `country` string[]
          - `domain_component` string[]
          - `email_address` string[]
          - `given_name` string[]
          - `jurisdiction_country` string[]
          - `jurisdiction_locality` string[]
          - `jurisdiction_province` string[]
          - `locality` string[]
          - `organization` string[]
          - `organizational_unit` string[]
          - `postal_code` string[]
          - `province` string[]
          - `serial_number` string[]
          - `street_address` string[]
          - `surname` string[]
        - `issuer_dn` string
        - `names` string[]
        - `redacted` boolean
        - `serial_number` string
        - `signature` CertParsedSignature
          - `self_signed` boolean
          - `signature_algorithm` CertParsedSignatureAlgorithm
            - `name` string
            - `oid` string
          - `valid` boolean
          - `value` string
        - `signature_algorithm` CertParsedSignatureAlgorithm
          - `name` string
          - `oid` string
        - `spki_subject_fingerprint` string
        - `subject` CertParsedSubject
          - `common_name` string[]
          - `country` string[]
          - `domain_component` string[]
          - `email_address` string[]
          - `given_name` string[]
          - `jurisdiction_country` string[]
          - `jurisdiction_locality` string[]
          - `jurisdiction_province` string[]
          - `locality` string[]
          - `organization` string[]
          - `organizational_unit` string[]
          - `postal_code` string[]
          - `province` string[]
          - `serial_number` string[]
          - `street_address` string[]
          - `surname` string[]
        - `subject_dn` string
        - `subject_key_info` CertParsedSubjectKeyInfo
          - `ecdsa_public_key` EcdsaPublicKey
            - `b` string
            - `curve` string
            - `gx` string
            - `gy` string
            - `length` integer
            - `n` string
            - `p` string
            - `pub` string
            - `x` string
            - `y` string
          - `fingerprint_sha256` string
          - `key_algorithm` KeyAlgorithm
            - `name` string
          - `rsa_public_key` RSAPublicKey
            - `exponent` integer
            - `length` integer
            - `modulus` string
        - `tbs_fingerprint` string
        - `tbs_noct_fingerprint` string
        - `validation_level` string
        - `validity` CertParsedValidity
          - `end` string, date-time
          - `length` integer
          - `start` string, date-time
          - `status` string
        - `version` integer
      - `raw` string — The raw certificate.
      - `updated_at` string, date-time — Timestamp when the certificate information was updated last time.
      - `validation` Validation
        - `is_valid` boolean — True if the certificate is valid, otherwise False.
        - `reason` string — The reason why certificate is invalid. In case if certificate is valid the line is empty.

## Other responses

- `400` — Bad request
- `401` — Unauthorized
- `500` — Internal server error

---

[API](https://skmtc.dev/spyse/apis/data-api.md) · [All operations](https://skmtc.dev/spyse/apis/data-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/spyse/data-api/revisions/fd05b83ed2c5/schema)