---
title: "Lists the deleted certificates in the specified vault currently available for recovery."
method: GET
path: "/deletedcertificates"
---

# Lists the deleted certificates in the specified vault currently available for recovery.

`GET /deletedcertificates`

The GetDeletedCertificates operation retrieves the certificates in the current vault which are in a deleted state and ready for recovery or purging. This operation includes deletion-specific information. This operation requires the certificates/get/list permission. This operation can only be enabled on soft-delete enabled vaults.

## Query parameters

- `api-version` string, required
- `maxresults` integer
- `includePending` boolean

## Response `200`

The request has succeeded.

- DeletedCertificateListResult — A list of certificates that have been deleted in this vault.
  - `value` DeletedCertificateItem[] — A response message containing a list of deleted certificates in the vault along with a link to the next page of deleted certificates.
    - `id` string — Certificate identifier.
    - `attributes` CertificateAttributes — The certificate management attributes.
      - `enabled` boolean — Determines whether the object is enabled.
      - `nbf` integer — Not before date in UTC.
      - `exp` integer — Expiry date in UTC.
      - `created` integer — Creation time in UTC.
      - `updated` integer — Last updated time in UTC.
      - `recoverableDays` integer — softDelete data retention days. Value should be >=7 and <=90 when softDelete enabled, otherwise 0.
      - `recoveryLevel` 'Purgeable' | 'Recoverable+Purgeable' | 'Recoverable' | 'Recoverable+ProtectedSubscription' | 'CustomizedRecoverable+Purgeable' | 'CustomizedRecoverable' | 'CustomizedRecoverable+ProtectedSubscription' — Reflects the deletion recovery level currently in effect for secrets in the current vault. If it contains 'Purgeable', the secret can be permanently deleted by a privileged user; otherwise, only the system can purge the secret, at the end of the retention interval.
    - `tags` object — Application specific metadata in the form of key-value pairs.
    - `x5t` string, base64url — Thumbprint of the certificate.
    - `recoveryId` string — The url of the recovery object, used to identify and recover the deleted certificate.
    - `scheduledPurgeDate` integer — The time when the certificate is scheduled to be purged, in UTC
    - `deletedDate` integer — The time when the certificate was deleted, in UTC
  - `nextLink` string — The URL to get the next set of deleted certificates.

## Other responses

- `default` — An unexpected error response.

---

[API](https://skmtc.net/azure/apis/keyvault-certificates.md) · [All operations](https://skmtc.net/azure/apis/keyvault-certificates/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/azure/keyvault-certificates/versions/b96f8513893b/schema)