---
title: "Lists the X.509 certificates in the supplied Octopus Deploy Space in pages. Current certificates are sorted by soonest expiry first unless OrderBy says otherwise; archived certificates are always sorted by most recently archived."
method: GET
path: "/certificates/v2"
tags: ["Certificates"]
---

# Lists the X.509 certificates in the supplied Octopus Deploy Space in pages. Current certificates are sorted by soonest expiry first unless OrderBy says otherwise; archived certificates are always sorted by most recently archived.

`GET /certificates/v2`

Skip and Take are required. TotalResults is always the real count of matching certificates, including when Tenant or FirstResult is supplied. Certificate data and passwords are never returned by this endpoint.

## Query parameters

- `archived` boolean
- `firstResult` string
- `ids` string[]
- `orderBy` string
- `search` string
- `skip` integer, required
- `take` integer, required
- `tenant` string

## Response `200`

Success

- CertificateResourcePaginatedCollection
  - `Items` CertificateResource[]
    - `Archived` string, date-time
    - `CertificateChain` X509Certificate[]
      - `IssuerDistinguishedName` string
      - `NotAfter` string, date-time
      - `NotBefore` string, date-time
      - `SerialNumber` string
      - `SignatureAlgorithmName` string
      - `SubjectDistinguishedName` string
      - `Thumbprint` string
      - `Version` integer
    - `CertificateData` SensitiveValue
      - `HasValue` boolean
      - `Hint` string
      - `NewValue` string
    - `CertificateDataFormat` 'Pkcs12' | 'Der' | 'Pem' | 'Unknown'
    - `EnvironmentIds` string[]
    - `HasPrivateKey` boolean
    - `Id` string
    - `IsExpired` boolean
    - `IssuerCommonName` string
    - `IssuerDistinguishedName` string
    - `IssuerOrganization` string
    - `LastModifiedBy` string
    - `LastModifiedOn` string, date-time
    - `Links` object
    - `Name` string
    - `NotAfter` string, date-time
    - `NotBefore` string, date-time
    - `Notes` string
    - `Password` SensitiveValue
      - `HasValue` boolean
      - `Hint` string
      - `NewValue` string
    - `ReplacedBy` string
    - `SelfSigned` boolean
    - `SerialNumber` string
    - `SignatureAlgorithmName` string
    - `SpaceId` string
    - `SubjectAlternativeNames` string[]
    - `SubjectCommonName` string — The certificate subject's common name (CN). When creating a self-signed certificate this becomes the generated certificate's CN, and at least one of SubjectCommonName or SubjectOrganization must be supplied.
    - `SubjectDistinguishedName` string
    - `SubjectOrganization` string — The certificate subject's organization (O). When creating a self-signed certificate, at least one of SubjectCommonName or SubjectOrganization must be supplied.
    - `TenantedDeploymentParticipation` 'Untenanted' | 'TenantedOrUntenanted' | 'Tenanted'
    - `TenantIds` string[]
    - `TenantTags` string[]
    - `Thumbprint` string
    - `Version` integer
  - `ItemsPerPage` integer
  - `ItemType` string
  - `LastPageNumber` integer
  - `NumberOfPages` integer
  - `TotalResults` integer

## Other responses

- `400` — Bad request. Either the payload was not structurally valid or business rules did not permit the operation.
- `404` — Not found. One or more of the entities involved in the operation was not found.

---

[API](https://skmtc.net/octopus/apis/octopus-server-api.md) · [All operations](https://skmtc.net/octopus/apis/octopus-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/octopus/octopus-server-api/revisions/835047dab520/schema)