Detect and decode a RFC 5280 related file
Detect the type of a RFC 5280 related file (certificate, certificate bundle, pkcs#10 or CRL) and decode it
The file to detect, PEM or DER encoded
|
file
string | string
required
|
|||||||||
|
|||||||||
-
200 The detected object type and its decoded value
application/jsontypestring requiredValuebundlevaluearray of objects (Certificate) requiredArray [
dnstring requiredThe certificate's distinguished name
dnElementsarray of object (DN Element) requiredThe distinguished name, with each element being an object
Array [
typestring requiredThe DN element type
EnumCNUIDSERIALNUMBERSURNAMEGIVENNAMEunstructuredAddressunstructuredNameEOUorganizationIdentifierUniqueIdentifierSTREETSTLOCDCvaluestring requiredThe DN Element value
]
issuerDnstring requiredThe DN of this certificate's issuer
serialstring requiredThis certificate's serial number
notBeforeinteger requiredThis certificate's start of validity
notAfterinteger requiredThis certificate's end of validity
keyTypestring requiredThis certificate's keytype
signingAlgorithmstring requiredThs certificate's signing algorithm
pemstring requiredPEM encoded certificate
certificateThumbprintstring requiredThe SHA-256 thumbprint of this certificate
certificateSHAOneThumbprintstring requiredThe SHA-1 thumbprint of this certificate
publicKeyThumbprintstring requiredThe thumbprint of the public key of this certificate
keyUsagesarray of string requiredThis certificate's Key Usages
isKeyUsagesCriticalboolean requiredIf true, the Key Usages extension of this certificate is critical
extendedKeyUsagesarray of string requiredThis certificate's Extended Key Usages
isExtendedKeyUsagesCriticalboolean requiredIf true, the Extended Key Usages extension of this certificate is critical
selfSignedboolean requiredIf true, this certificate is self-signed
subjectKeyIdentifierstringThe subject key identifier of this certificate
authorityKeyIdentifierstringThe authority key identifier of this certificate
sansarray of objects (SAN Element)List of this certificate's SANs
Array [
sanTypestring requiredThe type of SAN
EnumRFC822NAMEDNSNAMEURIIPADDRESSOTHERNAME_UPNOTHERNAME_GUIDREGISTERED_IDvaluestring requiredThe value of the SAN
]
basicConstraintsobjectThis certificate's Basic Constraints
isCaboolean requiredIf true, this certificate is a Certificate Authority certificate
pathLenintegerThe maximum number of intermediate certificates that may follow this certificate in a certification path
extensionsarray of objects (Certificate Extension Element)This certificate's Microsoft specific extensions
Array [
typestring requiredThe type of the extension
Enumms_sidms_templatems_template_v2valuestringThe value of the extension. Not setting this value means the extension should not be in the certificate
]
crldpsarray of stringThis certificate's CRL Distribution Points
aiasobjectThis certificate's Authority Information Access
crtarray of stringList of URIs on which the Certificate Authority certificate can be found
ocsparray of stringList of URIs on which the OCSP Responder of the Certificate Authority can be accessed
policiesarray of objects (Certificate Policy)This certificate's Certificate Policies
Array [
oidstring requiredObject Identifier of the policy
cpsUrlsarray of stringURIs to the Certification Practice Statement documents of this policy
userNoticesarray of objects (User Notice)The user notices of this policy
Array [
noticeNumbersarray of integerThe notice numbers of the user notice
explicitTextstringThe text of the user notice
organizationstringThe organization of the user notice
]
]
]
typestring requiredValuecertificatevalueobject (Certificate) requireddnstring requiredThe certificate's distinguished name
dnElementsarray of object (DN Element) requiredThe distinguished name, with each element being an object
Array [
typestring requiredThe DN element type
EnumCNUIDSERIALNUMBERSURNAMEGIVENNAMEunstructuredAddressunstructuredNameEOUorganizationIdentifierUniqueIdentifierSTREETSTLOCDCvaluestring requiredThe DN Element value
]
issuerDnstring requiredThe DN of this certificate's issuer
serialstring requiredThis certificate's serial number
notBeforeinteger requiredThis certificate's start of validity
notAfterinteger requiredThis certificate's end of validity
keyTypestring requiredThis certificate's keytype
signingAlgorithmstring requiredThs certificate's signing algorithm
pemstring requiredPEM encoded certificate
certificateThumbprintstring requiredThe SHA-256 thumbprint of this certificate
certificateSHAOneThumbprintstring requiredThe SHA-1 thumbprint of this certificate
publicKeyThumbprintstring requiredThe thumbprint of the public key of this certificate
keyUsagesarray of string requiredThis certificate's Key Usages
isKeyUsagesCriticalboolean requiredIf true, the Key Usages extension of this certificate is critical
extendedKeyUsagesarray of string requiredThis certificate's Extended Key Usages
isExtendedKeyUsagesCriticalboolean requiredIf true, the Extended Key Usages extension of this certificate is critical
selfSignedboolean requiredIf true, this certificate is self-signed
subjectKeyIdentifierstringThe subject key identifier of this certificate
authorityKeyIdentifierstringThe authority key identifier of this certificate
sansarray of objects (SAN Element)List of this certificate's SANs
Array [
sanTypestring requiredThe type of SAN
EnumRFC822NAMEDNSNAMEURIIPADDRESSOTHERNAME_UPNOTHERNAME_GUIDREGISTERED_IDvaluestring requiredThe value of the SAN
]
basicConstraintsobjectThis certificate's Basic Constraints
isCaboolean requiredIf true, this certificate is a Certificate Authority certificate
pathLenintegerThe maximum number of intermediate certificates that may follow this certificate in a certification path
extensionsarray of objects (Certificate Extension Element)This certificate's Microsoft specific extensions
Array [
typestring requiredThe type of the extension
Enumms_sidms_templatems_template_v2valuestringThe value of the extension. Not setting this value means the extension should not be in the certificate
]
crldpsarray of stringThis certificate's CRL Distribution Points
aiasobjectThis certificate's Authority Information Access
crtarray of stringList of URIs on which the Certificate Authority certificate can be found
ocsparray of stringList of URIs on which the OCSP Responder of the Certificate Authority can be accessed
policiesarray of objects (Certificate Policy)This certificate's Certificate Policies
Array [
oidstring requiredObject Identifier of the policy
cpsUrlsarray of stringURIs to the Certification Practice Statement documents of this policy
userNoticesarray of objects (User Notice)The user notices of this policy
Array [
noticeNumbersarray of integerThe notice numbers of the user notice
explicitTextstringThe text of the user notice
organizationstringThe organization of the user notice
]
]
typestring requiredValuecsrvalueobject (CFCertificationRequest) requireddnstring requireddnElementsarray of object (DN Element) requiredArray [
typestring requiredThe DN element type
EnumCNUIDSERIALNUMBERSURNAMEGIVENNAMEunstructuredAddressunstructuredNameEOUorganizationIdentifierUniqueIdentifierSTREETSTLOCDCvaluestring requiredThe DN Element value
]
keyTypestring requiredpemstring requiredsansarray of objects (SAN Element)Array [
sanTypestring requiredThe type of SAN
EnumRFC822NAMEDNSNAMEURIIPADDRESSOTHERNAME_UPNOTHERNAME_GUIDREGISTERED_IDvaluestring requiredThe value of the SAN
]
extensionsarray of objects (Certificate Extension Element)The Microsoft specific extensions of the certification request. Absent when there are none
Array [
typestring requiredThe type of the extension
Enumms_sidms_templatems_template_v2valuestringThe value of the extension. Not setting this value means the extension should not be in the certificate
]
typestring requiredValuecrlvalueobject (CFCrlWithEntriesResponse) requiredissuerDnstring requiredthisUpdatestring requirednextUpdatestring requiredentriesarray of objectThe revoked certificates listed in the CRL. Omitted when the CRL is empty
Array [
serialstring requiredThe serial number of the revoked certificate, hex encoded
dateinteger requiredThe revocation date, in milliseconds since epoch
reasonstringThe revocation reason, if present in the CRL entry
]
numberstringThe CRL number, hex encoded
versionintegerThe CRL version
authorityKeyIdentifierstringThe authority key identifier of the CRL issuer
-
400 Bad Request
application/problem+jsonerrorstring requiredThe error code of the problem
ValueRFC5280-005messagestring requiredA short, human-readable summary of the problem type
ValueInvalid RFC 5280 objecttitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueInvalid RFC 5280 objectdetailstringA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-007messagestring requiredA short, human-readable summary of the problem type
ValueInvalid Identity Providertitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueInvalid Identity ProviderdetailstringA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
-
401 Unauthorized request
application/problem+jsonerrorstring requiredThe error code of the problem
ValueSEC-AUTH-001messagestring requiredA short, human-readable summary of the problem type
ValueUnexpected errortitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueUnexpected errordetailstringA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-002messagestring requiredA short, human-readable summary of the problem type
ValueInvalid credentials or principal does not existtitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueInvalid credentials or principal does not existdetailstringA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-009messagestring requiredA short, human-readable summary of the problem type
ValueAuthentication expiredtitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueAuthentication expireddetailstringA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueSEC-AUTH-006messagestring requiredA short, human-readable summary of the problem type
ValuePrincipal not authenticated or authentication expiredtitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValuePrincipal not authenticated or authentication expireddetailstringA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
-
403 Forbidden action
application/problem+jsonerrorstring requiredThe error code of the problem
ValueLIC-001messagestring requiredA short, human-readable summary of the problem type
ValueInvalid Licensetitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueInvalid LicensedetailstringA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
errorstring requiredThe error code of the problem
ValueLIC-002messagestring requiredA short, human-readable summary of the problem type
ValueExpired Licensetitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueExpired LicensedetailstringA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807
-
500 Internal Server Error
application/problem+jsonerrorstring requiredThe error code of the problem
ValueRFC5280-001messagestring requiredA short, human-readable summary of the problem type
ValueUnexpected Errortitlestring requiredA short, human-readable summary of the problem type. In compliance with RFC7807
ValueUnexpected ErrordetailstringA human-readable explanation specific to this occurrence of the problem. In compliance with RFC7807