Sign in
latestOpenAPI 3.0.3Netlas API & Data License Agreement2026-08-104487309.0 KB

2b1f84425791

Certificates

Certificates Download

Retrieves size search results matching the query q in the selected indices.

The Netlas SDK and CLI tool additionally include a download_all() method and an --all key that allow you to query all available results.

post/api/certs/download/

Request body

qstring required

The query string used for searching. See Query Syntax for more details.

sizeinteger required

Number of documents to download. Call corresponding Count endpoint to get a number of available documents.

indicesIndiceLabel[]

A list of indice labels to search in. If not provided, the search will be performed in the default (most relevant index).

Call indices endpoint to get the list of available indices.

fieldsField[] required

You can control the amount of output data by specifying which fields to include or exclude in the response. Use the source_type parameter to select between include and exclude options.

source_type'include' | 'exclude' required

Specify fields and use source_type to choose between:

  • include to return only the specified fields
  • exclude to return all fields except the specified ones
type'json' | 'csv'

Download output format.

  • json: JSON array output.
  • csv: CSV text output in the response body.

Note: the API may still respond with Content-Type: application/json for CSV output, and Accept: text/csv may return 406. Use request field type: csv to request CSV.

Example request

{
  "q": "domain:example.com",
  "size": 1000,
  "indices": [
    "2025-09-24",
    "2025-09-02"
  ],
  "fields": [
    "*"
  ]
}

Response

Search Results

OR
string required

CSV text content returned by download endpoints when type: csv is requested.

Example response

[
  {
    "data": {
      "issuer_dn": "C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1",
      "fingerprint_md5": "c33979ff8bc19a94820d6804b3681881",
      "chain": [
        {
          "issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3",
          "fingerprint_md5": "bf44da68b5abcb0a48c8471806ff9706",
          "redacted": false,
          "signature": {
            "valid": false,
            "signature_algorithm": {
              "name": "ECDSA-SHA384",
              "oid": "1.2.840.10045.4.3.3"
            },
            "value": "MGUCMH4mWG7uiOwM3RVB7nq4mZlw0WJlT6AgnkexW8GyZzEdzHJ6ryJyQEJuZYT+h0sPGQIxAOa/1q40h1s/Z8cdqG/VEni15ocxRKldxrh4zM/v1DJYEf86hQY8HYRv0/X52jMcpA==",
            "self_signed": false
          },
          "subject": {
            "country": [
              "US"
            ],
            "organization": [
              "DigiCert Inc"
            ],
            "common_name": [
              "DigiCert Global G3 TLS ECC SHA384 2020 CA1"
            ]
          },
          "serial_number": "14626237344301700912191253757342652550",
          "version": 3,
          "issuer": {
            "country": [
              "US"
            ],
            "organization": [
              "DigiCert Inc"
            ],
            "common_name": [
              "DigiCert Global Root G3"
            ],
            "organizational_unit": [
              "www.digicert.com"
            ]
          },
          "fingerprint_sha256": "0587d6bd2819587ab90fb596480a5793bd9f7506a3eace73f5eab366017fe259",
          "tbs_noct_fingerprint": "b01920744bbb76c9ab053e01e07b7e050e473d20f79f7bea435fafe43c9d242f",
          "extensions": {
            "crl_distribution_points": [
              "http://crl3.digicert.com/DigiCertGlobalRootG3.crl"
            ],
            "subject_key_id": "8a23eb9e6bd7f9375df96d2139769aa167de10a8",
            "certificate_policies": [
              {
                "id": "2.16.840.1.114412.2.1"
              },
              {
                "id": "2.23.140.1.1"
              },
              {
                "id": "2.23.140.1.2.1"
              },
              {
                "id": "2.23.140.1.2.2"
              },
              {
                "id": "2.23.140.1.2.3"
              }
            ],
            "authority_key_id": "b3db48a4f9a1c5d8ae3641cc1163696229bc4bc6",
            "key_usage": {
              "digital_signature": true,
              "certificate_sign": true,
              "crl_sign": true,
              "value": 97
            },
            "authority_info_access": {
              "issuer_urls": [
                "http://cacerts.digicert.com/DigiCertGlobalRootG3.crt"
              ],
              "ocsp_urls": [
                "http://ocsp.digicert.com"
              ]
            },
            "basic_constraints": {
              "max_path_len": 0,
              "is_ca": true
            },
            "extended_key_usage": {
              "client_auth": true,
              "server_auth": true
            }
          },
          "tbs_fingerprint": "b01920744bbb76c9ab053e01e07b7e050e473d20f79f7bea435fafe43c9d242f",
          "subject_dn": "C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1",
          "fingerprint_sha1": "9577f91fe86c27d9912129730e8166373fc2eeb8",
          "signature_algorithm": {
            "name": "ECDSA-SHA384",
            "oid": "1.2.840.10045.4.3.3"
          },
          "spki_subject_fingerprint": "a7cb399df47e982018276c3397790bdef648e6d87b2f7b90d551f719ac6098c4",
          "validity": {
            "length": 315532799,
            "start": "2021-04-14T00:00:00Z",
            "end": "2031-04-13T23:59:59Z"
          },
          "validation_level": "EV"
        }
      ],
      "redacted": false,
      "src": "https://www.example.com:443/",
      "signature": {
        "valid": false,
        "signature_algorithm": {
          "name": "ECDSA-SHA384",
          "oid": "1.2.840.10045.4.3.3"
        },
        "value": "MGUCMQD5poJGU9tv5Vj67hq8/Jobt+9QMmo3wrCWtcPhem1PtAv4PTf4ED8VQSjd0PWLPfsCMGRjeOGy4sBbulawNu1f9DDGnqQ2wriOHX9GO9X/brSzFDAz8Yzu3T5PS4/Yv5jXZQ==",
        "self_signed": false
      },
      "subject": {
        "country": [
          "US"
        ],
        "province": [
          "California"
        ],
        "organization": [
          "Internet Corporation for Assigned Names and Numbers"
        ],
        "locality": [
          "Los Angeles"
        ],
        "common_name": [
          "*.example.com"
        ]
      },
      "serial_number": "14416812407440461216471976375640436634",
      "version": 3,
      "issuer": {
        "country": [
          "US"
        ],
        "organization": [
          "DigiCert Inc"
        ],
        "common_name": [
          "DigiCert Global G3 TLS ECC SHA384 2020 CA1"
        ]
      },
      "fingerprint_sha256": "455943cf819425761d1f950263ebf54755d8d684c25535943976f488bc79d23b",
      "tbs_noct_fingerprint": "bc8ace8a15de0d8136c6f642e1d1e367a3dd38d5534e3fc4f52c5ee6b86cb25d",
      "extensions": {
        "crl_distribution_points": [
          "http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl",
          "http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl"
        ],
        "subject_key_id": "f0c16a320decdac7ea8fcd0d6d191259d1be72ed",
        "certificate_policies": [
          {
            "cps": [
              "http://www.digicert.com/CPS"
            ],
            "id": "2.23.140.1.2.2"
          }
        ],
        "authority_key_id": "8a23eb9e6bd7f9375df96d2139769aa167de10a8",
        "key_usage": {
          "key_agreement": true,
          "digital_signature": true,
          "value": 17
        },
        "subject_alt_name": {
          "dns_names": [
            "*.example.com",
            "example.com"
          ]
        },
        "signed_certificate_timestamps": [
          {
            "log_id": "DleUvPOuqT4zGyyZB7P3kN+bwj1xMiXdIaklrGHFTiE=",
            "signature": "BAMARTBDAh8kFw9aTHzSKTu4thbo4a81i8ng2Y5HZFdz26+IU8fpAiBS265R6cchPlQ1Yl98EFGrfW1QaLtkNNKuszR/jPVVrg==",
            "version": 0,
            "timestamp": 1736902885
          },
          {
            "log_id": "ZBHEbKQS7KeJHKICLgC8q08oB9QeNSer6v7VA8l9zfA=",
            "signature": "BAMARjBEAiBwrujYB4VdUL4n/xuwR6u3IjBh/I3XIf8cuC862JXrFwIgcjBTLw4RoOLGJtTLKwxlXnXMKROHjdEbmXBRplscCXI=",
            "version": 0,
            "timestamp": 1736902885
          },
          {
            "log_id": "SZybad4dfOz8Nt7Nh2SmuFuvCoeAGdFVUvvp6ynd+MM=",
            "signature": "BAMARzBFAiBoWHrvIRDaXCCbdfXqfaJaMRAUgjZvZ+k420FWJtlVbAIhAPmmyqNcNiwgRvWHKHRLxsE3c7i7awD3OKwoiViNmDzC",
            "version": 0,
            "timestamp": 1736902885
          }
        ],
        "authority_info_access": {
          "issuer_urls": [
            "http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt"
          ],
          "ocsp_urls": [
            "http://ocsp.digicert.com"
          ]
        },
        "basic_constraints": {
          "is_ca": false
        },
        "extended_key_usage": {
          "client_auth": true,
          "server_auth": true
        }
      },
      "tbs_fingerprint": "ad7d5aa4244532a22369dfa25a851e180cb34a39d90efba98022f0f9832e0bd9",
      "names": [
        "*.example.com",
        "example.com"
      ],
      "subject_dn": "C=US, ST=California, L=Los Angeles, O=Internet Corporation for Assigned Names and Numbers, CN=*.example.com",
      "fingerprint_sha1": "310db7af4b2bc9040c8344701aca08d0c69381e3",
      "signature_algorithm": {
        "name": "ECDSA-SHA384",
        "oid": "1.2.840.10045.4.3.3"
      },
      "spki_subject_fingerprint": "9d77c9a308deb7b5d91be7d8d5e10587bd9381a70913cfad1883b9bdcd825d43",
      "validity": {
        "length": 31622399,
        "start": "2025-01-15T00:00:00Z",
        "end": "2026-01-15T23:59:59Z"
      },
      "validation_level": "OV"
    }
  }
]