---
title: "Return domains with installed SSL certificates"
method: GET
path: "/listcrts"
tags: ["SSL", "SSL Server Settings"]
---

# Return domains with installed SSL certificates

`GET /listcrts`

This function lists the server's domains with installed SSL certificates.

## Query parameters

- `registered` 1 | 0
- `user` string, username

## Response `200`

HTTP Request was successful.

- object
  - `data` object
    - `crt` object[] — Information about the certificate.
      - `domain` string, domain — The certificate's primary domain.
      - `domain_owners` string[] — A list of the owners of the domain or domains that the certificate covers.
      - `domains` string[] — A list of the domain or domains that the certificate covers.
      - `ecdsa_curve_name` 'prime256v1' | 'secp384r1', nullable — The ECDSA curve that the certificate's key uses. * `prime256v1` * `secp384r1` * `null` — The certificate's key is **not** an ECDSA key.
      - `friendly_name` string — The certificate's friendly name.
      - `id` string — The certificate's ID.
      - `is_self_signed` 1 | 0 — Whether the certificate is self-signed. * `1` — Self-signed. * `0` — **Not** self-signed.
      - `issuer.organizationName` string — The certificate's Organization Name.
      - `key_algorithm` 'rsaEncryption' | 'id-ecPublicKey' — The certificate's key's algorithm. * `rsaEncryption` — RSA. * `id-ecPublicKey` — ECDSA.
      - `modulus_length` integer, nullable — The certificate's key's modulus length, in bits. * `null` — The certificate's key is **not** an RSA key.
      - `not_after` integer — The date the certificate expires.
      - `registered` 1 | 0 — Whether the certificate is registered with a CA. * `1` — Registered. * `0` — **Not** registered.
      - `signature_algorithm` string — The certificate's OID hash algorithm signature.
      - `validation_type` 'ev' | 'dv' | 'ov', nullable — The certificate's validation type. * `ev` — Extended Validation. * `ov` — Organization Validation. * `dv` — Domain Validated. * `null` — The system could **not** parse and determine the certificate's validation type.
  - `metadata` object
    - `command` string — The method name called.
    - `reason` string — The reason the API function failed when the `metadata.result` field is `0`. This field may display a success message when a function succeeds.
    - `result` 1 | 0 — * `1` — Success. * `0` — Failed. Check the `reason` field for more details.
    - `version` integer — The version of the API function.

---

[API](https://skmtc.net/cpanel/apis/whm-api.md) · [All operations](https://skmtc.net/cpanel/apis/whm-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cpanel/whm-api/revisions/3da41671c02c/schema)