Search certificates
Send a certificate search query (in HCQL format) and return the certificate search results
|
enableAnalytics
boolean
Use the analytics database if enabled. true if not specified. |
|
query
string | null
The HCQL query to use for the search, represents the way to filter certificates. If not specified, it will filter nothing |
|||
|
fields
array of string | null
The fields to be returned by the search. If this parameter is not specified, everything is returned by default. If this parameter is equal to an empty array, only the _id field is returned. |
|||
|
sortedBy
array of objects | null (SortElement)
The way to sort the search results. |
|||
|
Array [
] |
|||
|
pageIndex
integer | null
The index of the page to retrieve |
|||
|
pageSize
integer | null
The maximum number of items to retrieve for one page |
|||
|
withCount
boolean | null
If set to true, the total count of certificates matching the HCQL query will be returned. |
|||
-
200 The certificate search results
application/jsonresultsarray of objects (CertificateSearchResult) requiredList of certificates that matched the search criteria
Array [
_idstring | nullmodulestring | nullprofilestring | nullownerstring | nullteamstring | nulldiscoveredTrustedboolean | nulldiscoveryInfoarray of objects | null (DiscoveryInfo)Array [
campaignstring requiredThe discovery campaign's name
lastDiscoveryDateinteger requiredWhen this certificate was discovered for the last time
identifierstring | nullIdentifier of the user that discovered this certificate
]
discoveryDataarray of objects | null (HostDiscoveryData)Array [
ipstring | nullThe certificate's host ip
sourcesarray of string | nullInformation on the type of discovery that discovered this certificate
hostnamesarray of string | nullThe certificate's host hostnames (netscan only)
operatingSystemsarray of string | nullThe certificate's host operating system (localscan only)
pathsarray of string | nullThe path to the certificate on the host machine (localscan only)
usagesarray of string | nullThe path of the configuration files that were used to find the certificates
tlsPortsarray of objects | null (TlsPort)The ports on which the certificate is exposed for https connexion
Array [
portinteger requiredThe number of the port
versionstring requiredProtocol version used
]
]
certificatestring | nullthumbprintstring | nullselfSignedboolean | nullpublicKeyThumbprintstring | nulldnstring | nullserialstring | nullissuerstring | nullnotBeforeinteger | nullnotAfterinteger | nullrevocationDateinteger | nullrevocationReasonstring | null (Revocation Reason)One of: unspecified, keycompromise, cacompromise, affiliationchange, superseded, cessationofoperation
keyTypestring | null (Keytype)One of rsa-2048, rsa-3072, rsa-4096, rsa-8192, ec-secp256r1, ec-secp384r1, ec-secp521r1, ed-448, ed-25519, mldsa-44, mldsa-65, mldsa-87, slhdsa-sha2-128s, slhdsa-sha2-128f, slhdsa-sha2-192s, slhdsa-sha2-192f, slhdsa-sha2-256s, slhdsa-sha2-256f, slhdsa-sha2-128ssha256, slhdsa-sha2-128fsha256, slhdsa-sha2-192ssha512, slhdsa-sha2-192fsha512, slhdsa-sha2-256ssha512, slhdsa-sha2-256fsha512 or
+ signingAlgorithmstring | nullsubjectAlternateNamesarray of objects | null (SubjectAlternateName)Array [
sanTypestring requiredThe type of the SAN
EnumRFC822NAMEDNSNAMEURIIPADDRESSOTHERNAME_UPNOTHERNAME_GUIDREGISTERED_IDvaluestring requiredThe value of the SAN
]
metadataarray of objects | null (Certificate Metadata)Array [
keystring requiredThe metadata name
Enumpki_connectorprevious_certificate_idrenewed_certificate_idautomation_policygs_order_idmetapki_iddigicert_identrust_idscep_transidfcms_idgsatlas_idcerteurope_iddigicert_order_idvaluestring requiredThe metadata value
]
thirdPartyDataarray of objects | null (ThirdPartyItem)Array [
connectorstring requiredThe third party connector name on which this certificate is synchronized
idstring requiredThe Id of this certificate on the third party
fingerprintstring | nullThe fingerprint of this certificate on the third party
pushDateinteger | nullThe date when the certificate was pushed to this third party
removeDateinteger | nullThe date when the certificate was removed from this third party (in case of revocation)
]
triggerResultsarray of objects | null (TriggerResult)Array [
namestring requiredThe name of the trigger that was executed
eventstring requiredThe event that triggered the trigger
Enumon_deny_updateon_cancel_migrateon_pending_renewon_submit_migrateon_cancel_updateon_approve_migrateon_pending_recoveron_pending_enrollon_deny_revokeon_cancel_renewon_submit_recoveron_submit_enrollon_cancel_recoveron_approve_revokeon_pending_updateon_deny_recoveron_approve_renewon_deny_migrateon_revokeon_approve_recoveron_expireon_enrollon_deny_renewon_approve_updateon_recoveron_deny_enrollon_submit_renewon_updateon_approve_enrollon_cancel_enrollon_pending_migrateon_pending_revokeon_submit_updateon_submit_revokeon_migrateon_cancel_revokeon_renewtriggerTypestring requiredThe type of the trigger
Enumawsemailf5clientldappubintunepkcsakvwebhooklastExecutionDateinteger requiredThe last time this trigger was executed for this certificate and this event
statusstring requiredThe status of the trigger after its execution
Enumsuccessfailureretryableboolean requiredIs this trigger manually retryable (can be run)
retriesinteger | nullThe number of remaining tries before the trigger is abandoned
nextExecutionDateinteger | nullThe next scheduled execution time for this trigger
nextDelaystring | nullTime that will be waited between the next and the next+1 execution of this trigger
detailstring | nullContains details on this trigger's execution
]
holderIdstring | nulllabelsarray of objects | null (LabelData)Array [
keystring requiredThe label's name
valuestring requiredThe label's value
]
privateKeyobject | null (EscrowedPrivateKey)horizonKeystring requiredvaluestring | nullvaultKeystring | nulltransientboolean | nullpermissionsobject | null (CertificatePermissions)revokeboolean requiredWhether the principal is authorized to revoke this certificate
requestRevokeboolean requiredWhether the principal is authorized to request revocation of this certificate
updateboolean requiredWhether the principal is authorized to update this certificate
requestUpdateboolean requiredWhether the principal is authorized to request update of this certificate
migrateboolean requiredWhether the principal is authorized to migrate this certificate
requestMigrateboolean requiredWhether the principal is authorized to request migration of this certificate
enrollboolean | nullWhether the principal is authorized to re-enroll this certificate
requestEnrollboolean | nullWhether the principal is authorized to request re-enrollment of this certificate
recoverboolean | nullWhether the principal is authorized to recover this certificate
requestRecoverboolean | nullWhether the principal is authorized to request recovery of this certificate
renewboolean | nullWhether the principal is authorized to renew this certificate
requestRenewboolean | nullWhether the principal is authorized to request renewal of this certificate
contactEmailstring | nullgradesarray of objects | null (GradingPolicyResult)Array [
namestring requiredThe name of the grading policy
gradestring requiredThe grade awarded by the grading policy
]
]
pageIndexinteger requiredThe index of the page that has been retrieved
pageSizeinteger requiredThe size of the page that has been retrieved
hasMoreboolean requiredIndicates whether the response represents the last page of results (if set to false) or not (if set to true)
countinteger | nullIf withCount was set to true in the query payload, represents the total number of certificates that were retrieved for that query
-
400 Bad request
application/problem+jsonerrorstring requiredThe error code of the problem
ValueCERT-SEARCH-002messagestring requiredA short, human-readable summary of the problem type
ValueInvalid Search Requesttitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueInvalid Search Requestdetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-007messagestring requiredA short, human-readable summary of the problem type
ValueInvalid Identity Providertitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueInvalid Identity Providerdetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-008messagestring requiredA short, human-readable summary of the problem type
ValueInvalid redirect pathtitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueInvalid redirect pathdetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueHQL-001messagestring requiredA short, human-readable summary of the problem type
ValueInvalid HQL querytitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueInvalid HQL querydetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
-
401 Unauthorized request.
application/problem+jsonerrorstring requiredThe error code of the problem
ValueSEC-AUTH-002messagestring requiredA short, human-readable summary of the problem type
ValueInvalid credentials or principal does not existtitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueInvalid credentials or principal does not existdetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-009messagestring requiredA short, human-readable summary of the problem type
ValuePrincipal not authenticated or authentication expiredtitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValuePrincipal not authenticated or authentication expireddetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
-
403 Unauthorized request.
application/problem+jsonerrorstring requiredThe error code of the problem
ValueSEC-AUTH-003messagestring requiredA short, human-readable summary of the problem type
ValueCertificate is not trustedtitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueCertificate is not trusteddetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-004messagestring requiredA short, human-readable summary of the problem type
ValueCertificate is expiredtitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueCertificate is expireddetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-005messagestring requiredA short, human-readable summary of the problem type
ValueCertificate is revokedtitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueCertificate is revokeddetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-006messagestring requiredA short, human-readable summary of the problem type
ValuePrincipal not authenticatedtitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValuePrincipal not authenticateddetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueLIC-002messagestring requiredA short, human-readable summary of the problem type
ValueInvalid Licensetitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueInvalid Licensedetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueLIC-004messagestring requiredA short, human-readable summary of the problem type
ValueExpired Licensetitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueExpired Licensedetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
-
500 Internal server error.
application/problem+jsonerrorstring requiredThe error code of the problem
ValueCERT-SEARCH-001messagestring requiredA short, human-readable summary of the problem type
ValueUnexpected errortitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueUnexpected errordetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-001messagestring requiredA short, human-readable summary of the problem type
ValueUnexpected Errortitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueUnexpected Errordetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueLIC-001messagestring requiredA short, human-readable summary of the problem type
ValueUnexpected errortitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueUnexpected errordetailstring | nullA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807