---
title: "List All Certificates"
method: GET
path: "/api/service/certificate"
tags: ["Service"]
---

# List All Certificates

`GET /api/service/certificate`

List all certificates configured in the cluster.

        This endpoint returns a list of all certificates managed by certmgr,
        including both user-provided and cephadm-signed certificates.

        :param status: Filter by certificate status. Valid values: 'expired',
            'expiring', 'valid', 'invalid'
        :param scope: Filter by certificate scope. Valid values: 'SERVICE',
            'HOST', 'GLOBAL'
        :param service_type: Filter by service type. Supports wildcards
            (e.g., 'rgw*')
        :param include_cephadm_signed: If True, include cephadm-signed certificates.
            If False (default), only user-provided certificates are returned.
        :return: List of certificate objects with their details

## Query parameters

- `status` string
- `scope` string
- `service_type` string
- `include_cephadm_signed` boolean

## Response `200`

OK

- object[]
  - `cert_name` string — Certificate name
  - `common_name` string — Certificate common name (CN)
  - `days_to_expiration` integer — Days remaining until expiration
  - `expiry_date` string — Certificate expiration date
  - `issuer` string — Certificate issuer distinguished name
  - `scope` string — Certificate scope (SERVICE, HOST, or GLOBAL)
  - `signed_by` string — Certificate issuer (user or cephadm)
  - `status` string — Certificate status (valid, expiring, expired, invalid)
  - `target` string — Certificate target (service name or hostname)

## Other responses

- `400` — Operation exception. Please check the response body for details.
- `401` — Unauthenticated access. Please login first.
- `403` — Unauthorized access. Please check your permissions.
- `500` — Unexpected error. Please check the response body for the stack trace.

---

[API](https://skmtc.net/ceph/apis/ceph-rest-api.md) · [All operations](https://skmtc.net/ceph/apis/ceph-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ceph/ceph-rest-api/versions/b03ae23c3806/schema)