Retrieve a certificate by PEM

Retrieve a specific certificate based on its PEM encoded value

Path parameters
pem
string required

The URL encoded PEM encoded value of the certificate

Example -----BEGIN%20CERTIFICATE----- ... -----END%20CERTIFICATE-----
Responses
  • 200 The specified certificate
    metadata
    array of objects (Certificate Metadata) required

    The certificate's technical metadata used internally
    notAfter
    integer required

    The certificate's expiration date in milliseconds since the epoch
    thumbprint
    string required

    The certificate's thumbprint
    certificate
    string required

    The certificate's PEM-encoded content
    dn
    string required

    The certificate's Distinguished Name
    revoked
    boolean required

    Whether the certificate is revoked
    escrowed
    boolean required

    Whether the certificate is escrowed
    issuer
    string required

    The certificate's issuer Distinguished Name
    notBefore
    integer required

    The certificate's start date in milliseconds since the epoch
    selfSigned
    boolean required

    Whether the certificate is self-signed
    keyType
    string (Keytype) required

    The certificate's key type
    publicKeyThumbprint
    string required

    The certificate's public key thumbprint
    module
    string required

    The certificate's module
    holderId
    string required

    The certificate's holder ID. This is a computed field that is used to count how many similar certificates are in use simultaneously by the same holder
    subjectAlternateNames
    array of objects (SubjectAlternateName) required

    The certificate's Subject Alternate Names
    serial
    string required

    The certificate's serial number
    signingAlgorithm
    string required

    The certificate's signing algorithm
    _id
    string (Internal ID) required

    Object internal ID
    revocationDate
    integer | null

    The certificate's revocation date in milliseconds since the epoch. This field is only present if the certificate is revoked
    grades
    array of objects | null (GradingPolicyResult)

    The certificate's grades for the enabled grading policies
    crlSynchronized
    boolean | null

    Whether the certificate's revocation status is synchronized with a CRL
    discoveredTrusted
    boolean | null

    If the certificate was discovered and is found to be issued by an existing trusted CA, this field will be set to true. If the certificate was discovered and is not found to be issued by an existing trusted CA, this field will be set to false. If the certificate was not discovered, this field will be null
    thirdPartyData
    array of objects | null (ThirdPartyItem)

    The certificate's information about synchronization with Horizon supported third parties
    owner
    string | null

    The certificate's owner. This is a reference to a local identity identifier
    contactEmail
    string | null

    The certificate's contact email. It will be used to send notifications about the certificate's expiration and revocation
    profile
    string | null

    The certificate's profile
    team
    string | null

    The certificate's team. This is a reference to a team identifier. It will be used to determine the certificate's permissions and send notifications
    labels
    array of objects | null (LabelData)

    The certificate's labels
    discoveryInfo
    array of objects | null (DiscoveryInfo)

    A list of metadata containing information on how and when the certificate was discovered
    triggerResults
    array of objects | null (TriggerResult)

    The result of the execution of triggers on this certificate
    extensions
    array of objects (CertificateExtension)

    The certificate's extensions
    discoveryData
    array of objects | null (HostDiscoveryData)

    A list of metadata containing information on where the certificate was discovered
    revocationReason
    string | null (Revocation Reason)

    The certificate's revocation reason
  • 400 Bad request
  • 401 Unauthorized request
  • 403 Unauthorized request
  • 404 Certificate not found
  • 500 Unexpected internal server error