---
title: "GET /user/{userID}/certificate-pinned/{itemId}"
method: GET
path: "/user/{userID}/certificate-pinned/{itemId}"
tags: ["certificate-pinned"]
---

# GET /user/{userID}/certificate-pinned/{itemId}

`GET /user/{userID}/certificate-pinned/{itemId}`

Get the pinned certificate chain with the specified ID.

## Path parameters

- `userID` integer, required
- `itemId` integer, required

## Headers

- `Cache-Control` string
- `User-Agent` string, required
- `X-Bunq-Language` string
- `X-Bunq-Region` string
- `X-Bunq-Client-Request-Id` string
- `X-Bunq-Geolocation` string
- `X-Bunq-Client-Authentication` string, required

## Response `200`

This endpoint allow you to pin the certificate chains to your account. These certificate chains are used for SSL validation whenever a callback is initiated to one of your https callback urls.

- CertificatePinnedRead
  - `certificate_chain` string — The certificate chain in .PEM format. Certificates are glued with newline characters.
  - `id` integer — The id generated for the pinned certificate chain.

## Other responses

- `400` — This is how the error response looks like for 4XX response codes

---

[API](https://skmtc.net/bunq/apis/bunq-api.md) · [All operations](https://skmtc.net/bunq/apis/bunq-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bunq/bunq-api/revisions/369477c7bd26/schema)