---
title: "Return SSL certificate information for all FQDN"
method: GET
path: "/SSL/fetch_certificates_for_fqdns"
tags: ["SSL", "cPanel Account SSL Management"]
---

# Return SSL certificate information for all FQDN

`GET /SSL/fetch_certificates_for_fqdns`

This function retrieves the certificate information for all fully qualified domain names (FQDNs) that the account owns.

## Query parameters

- `domains` string, required

## Response `200`

HTTP Request was successful.

- object
  - `apiversion` integer — The version of the API.
  - `func` string — The name of the method called.
  - `module` string — The name of the module called.
  - `result` object
    - `data` object[]
      - `cab` string, pem-certificate — The CA bundle's contents.
      - `created` integer — When the certificate was created.
      - `crt` string, pem-certificate — The certificate's contents in Base64 PEM format.
      - `domain_is_configured` 0 | 1 — Whether the certificate is installed on the account. * `1` — Installed. * `0` — Not installed.
      - `domains` string[] — The domains that the CSR covers.
      - `ecdsa_curve_name` 'prime256v1' | 'secp384r1', nullable — The ECDSA curve that the certificate's key uses. * `prime256v1` * `secp384r1` * `null` — The certificate's key is **not** an ECDSA key.
      - `ecdsa_public` string, nullable — The certificate's key's ECDSA compressed public point, in hexadecimal format. * `null` — The certificate's key is **not** an ECDSA key.
      - `friendly_name` string — The certificate's friendly name.
      - `id` string — The certificate's identification.
      - `is_self_signed` 0 | 1 — Whether the certificate is self-signed. - `1` — Self-signed. - `0` — Not self-signed.
      - `issuer.commonName` string — The name that issued the certificate.
      - `issuer.organizationName` string — The certificate's organization.
      - `issuer_text` string — The certificate's issuer information.
      - `key` string, pem-private-key — The private key in Base64 PEM format.
      - `key_algorithm` 'rsaEncryption' | 'id-ecPublicKey' — The certificate's key's algorithm. * `rsaEncryption` — RSA. * `id-ecPublicKey` — ECDSA.
      - `modulus` string, nullable — The length, in bits, of the certificate's key's modulus. * `null` — The certificate's key is **not** an RSA key.
      - `modulus_length` integer, nullable — The length, in bits, of the certificate's key's modulus. * `null` — The certificate's key is **not** an RSA key.
      - `not_after` integer — When the certificate expired.
      - `not_before` integer — When the certificate started.
      - `serial` string — The certificate's serial number.
      - `signature_algorithm` string — The OID of the hash algorithm used to sign the certificate request.
      - `subject.commonName` string, domain — The certificate's common name.
      - `subject_text` string — The certificate's subject text information.
      - `validation_type` string — The certificate's validation type. * `ev` — Extended Validation. * `ov` — Organization Validated. * `dv` — Domain Validated. * `null` — The system could not parse and determine the certificate's validation type.
      - `verify_error` string — A message that explains the reason for a verification error.
    - `errors` string[], nullable — List of errors if the API failed.
    - `messages` string[], nullable — List of messages generated by the API.
    - `metadata` object
      - `transformed` 1 — Post-processing may have transformed the data.
    - `status` 0 | 1 — - `1` — Success. - `0` — Failed. Check the `errors` field for more details.
    - `warnings` string[], nullable — List of warnings generated by the API. Warnings describe non-critical failures or other problematic conditions noted while running a API.

---

[API](https://skmtc.net/cpanel/apis/cpanel-uapi.md) · [All operations](https://skmtc.net/cpanel/apis/cpanel-uapi/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cpanel/cpanel-uapi/revisions/632e2f8e6d04/schema)