Certificates
Certificates Search
Searches for q in the selected indices and returns up to 20 search results, starting from the start+1 document.
❗️ This method allows retrieving only the first 10,000 search results.
Use it when the expected number of results is relatively low or to craft and refine a query. Use the Download endpoint to fetch results without pagination or quantity limitations.
get/api/certs/
Query parameters
qstring required
The query string used for searching. See Query Syntax for more details.
Example:domain:example.com
startinteger
Use for pagination. Offset from the first search result to return.
Example:20
indicesIndiceLabel[]
A list of indice labels to search in. If not provided, the search will be performed in the default (most relevant index).
Call indices endpoint to get the list of available indices.
ℹ️ Netlas stores all collected certificates in a single default index.
This parameter is included for interface consistency but is not applicable to certificate-related endpoints.
[ "2025-09-24", "2025-09-02" ]
fieldsField[]
You can control the amount of output data by specifying which fields to include or exclude in the response. Use the source_type parameter to select between include and exclude options.
[ "*" ]
source_type'include' | 'exclude'
Specify fields and use source_type to choose between:
- include to return only the specified fields
- exclude to return all fields except the specified ones
Response
Search Results
Example response
{
"items": [
{
"data": {
"issuer_dn": "C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1",
"fingerprint_md5": "c33979ff8bc19a94820d6804b3681881",
"chain": [
{
"issuer_dn": "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3",
"fingerprint_md5": "bf44da68b5abcb0a48c8471806ff9706",
"redacted": false,
"signature": {
"valid": false,
"signature_algorithm": {
"name": "ECDSA-SHA384",
"oid": "1.2.840.10045.4.3.3"
},
"value": "MGUCMH4mWG7uiOwM3RVB7nq4mZlw0WJlT6AgnkexW8GyZzEdzHJ6ryJyQEJuZYT+h0sPGQIxAOa/1q40h1s/Z8cdqG/VEni15ocxRKldxrh4zM/v1DJYEf86hQY8HYRv0/X52jMcpA==",
"self_signed": false
},
"subject": {
"country": [
"US"
],
"organization": [
"DigiCert Inc"
],
"common_name": [
"DigiCert Global G3 TLS ECC SHA384 2020 CA1"
]
},
"serial_number": "14626237344301700912191253757342652550",
"version": 3,
"issuer": {
"country": [
"US"
],
"organization": [
"DigiCert Inc"
],
"common_name": [
"DigiCert Global Root G3"
],
"organizational_unit": [
"www.digicert.com"
]
},
"fingerprint_sha256": "0587d6bd2819587ab90fb596480a5793bd9f7506a3eace73f5eab366017fe259",
"tbs_noct_fingerprint": "b01920744bbb76c9ab053e01e07b7e050e473d20f79f7bea435fafe43c9d242f",
"extensions": {
"crl_distribution_points": [
"http://crl3.digicert.com/DigiCertGlobalRootG3.crl"
],
"subject_key_id": "8a23eb9e6bd7f9375df96d2139769aa167de10a8",
"certificate_policies": [
{
"id": "2.16.840.1.114412.2.1"
},
{
"id": "2.23.140.1.1"
},
{
"id": "2.23.140.1.2.1"
},
{
"id": "2.23.140.1.2.2"
},
{
"id": "2.23.140.1.2.3"
}
],
"authority_key_id": "b3db48a4f9a1c5d8ae3641cc1163696229bc4bc6",
"key_usage": {
"digital_signature": true,
"certificate_sign": true,
"crl_sign": true,
"value": 97
},
"authority_info_access": {
"issuer_urls": [
"http://cacerts.digicert.com/DigiCertGlobalRootG3.crt"
],
"ocsp_urls": [
"http://ocsp.digicert.com"
]
},
"basic_constraints": {
"max_path_len": 0,
"is_ca": true
},
"extended_key_usage": {
"client_auth": true,
"server_auth": true
}
},
"tbs_fingerprint": "b01920744bbb76c9ab053e01e07b7e050e473d20f79f7bea435fafe43c9d242f",
"subject_dn": "C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1",
"fingerprint_sha1": "9577f91fe86c27d9912129730e8166373fc2eeb8",
"signature_algorithm": {
"name": "ECDSA-SHA384",
"oid": "1.2.840.10045.4.3.3"
},
"spki_subject_fingerprint": "a7cb399df47e982018276c3397790bdef648e6d87b2f7b90d551f719ac6098c4",
"validity": {
"length": 315532799,
"start": "2021-04-14T00:00:00Z",
"end": "2031-04-13T23:59:59Z"
},
"validation_level": "EV"
}
],
"redacted": false,
"src": "https://www.example.com:443/",
"signature": {
"valid": false,
"signature_algorithm": {
"name": "ECDSA-SHA384",
"oid": "1.2.840.10045.4.3.3"
},
"value": "MGUCMQD5poJGU9tv5Vj67hq8/Jobt+9QMmo3wrCWtcPhem1PtAv4PTf4ED8VQSjd0PWLPfsCMGRjeOGy4sBbulawNu1f9DDGnqQ2wriOHX9GO9X/brSzFDAz8Yzu3T5PS4/Yv5jXZQ==",
"self_signed": false
},
"subject": {
"country": [
"US"
],
"province": [
"California"
],
"organization": [
"Internet Corporation for Assigned Names and Numbers"
],
"locality": [
"Los Angeles"
],
"common_name": [
"*.example.com"
]
},
"serial_number": "14416812407440461216471976375640436634",
"version": 3,
"issuer": {
"country": [
"US"
],
"organization": [
"DigiCert Inc"
],
"common_name": [
"DigiCert Global G3 TLS ECC SHA384 2020 CA1"
]
},
"fingerprint_sha256": "455943cf819425761d1f950263ebf54755d8d684c25535943976f488bc79d23b",
"tbs_noct_fingerprint": "bc8ace8a15de0d8136c6f642e1d1e367a3dd38d5534e3fc4f52c5ee6b86cb25d",
"extensions": {
"crl_distribution_points": [
"http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl",
"http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl"
],
"subject_key_id": "f0c16a320decdac7ea8fcd0d6d191259d1be72ed",
"certificate_policies": [
{
"cps": [
"http://www.digicert.com/CPS"
],
"id": "2.23.140.1.2.2"
}
],
"authority_key_id": "8a23eb9e6bd7f9375df96d2139769aa167de10a8",
"key_usage": {
"key_agreement": true,
"digital_signature": true,
"value": 17
},
"subject_alt_name": {
"dns_names": [
"*.example.com",
"example.com"
]
},
"signed_certificate_timestamps": [
{
"log_id": "DleUvPOuqT4zGyyZB7P3kN+bwj1xMiXdIaklrGHFTiE=",
"signature": "BAMARTBDAh8kFw9aTHzSKTu4thbo4a81i8ng2Y5HZFdz26+IU8fpAiBS265R6cchPlQ1Yl98EFGrfW1QaLtkNNKuszR/jPVVrg==",
"version": 0,
"timestamp": 1736902885
},
{
"log_id": "ZBHEbKQS7KeJHKICLgC8q08oB9QeNSer6v7VA8l9zfA=",
"signature": "BAMARjBEAiBwrujYB4VdUL4n/xuwR6u3IjBh/I3XIf8cuC862JXrFwIgcjBTLw4RoOLGJtTLKwxlXnXMKROHjdEbmXBRplscCXI=",
"version": 0,
"timestamp": 1736902885
},
{
"log_id": "SZybad4dfOz8Nt7Nh2SmuFuvCoeAGdFVUvvp6ynd+MM=",
"signature": "BAMARzBFAiBoWHrvIRDaXCCbdfXqfaJaMRAUgjZvZ+k420FWJtlVbAIhAPmmyqNcNiwgRvWHKHRLxsE3c7i7awD3OKwoiViNmDzC",
"version": 0,
"timestamp": 1736902885
}
],
"authority_info_access": {
"issuer_urls": [
"http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt"
],
"ocsp_urls": [
"http://ocsp.digicert.com"
]
},
"basic_constraints": {
"is_ca": false
},
"extended_key_usage": {
"client_auth": true,
"server_auth": true
}
},
"tbs_fingerprint": "ad7d5aa4244532a22369dfa25a851e180cb34a39d90efba98022f0f9832e0bd9",
"names": [
"*.example.com",
"example.com"
],
"subject_dn": "C=US, ST=California, L=Los Angeles, O=Internet Corporation for Assigned Names and Numbers, CN=*.example.com",
"fingerprint_sha1": "310db7af4b2bc9040c8344701aca08d0c69381e3",
"signature_algorithm": {
"name": "ECDSA-SHA384",
"oid": "1.2.840.10045.4.3.3"
},
"spki_subject_fingerprint": "9d77c9a308deb7b5d91be7d8d5e10587bd9381a70913cfad1883b9bdcd825d43",
"validity": {
"length": 31622399,
"start": "2025-01-15T00:00:00Z",
"end": "2026-01-15T23:59:59Z"
},
"validation_level": "OV"
}
}
]
}