---
title: "List X.509 certificates managed by Octopus"
method: GET
path: "/spaces/{spaceIdentifier}/certificates"
tags: ["Certificates"]
---

# List X.509 certificates managed by Octopus

`GET /spaces/{spaceIdentifier}/certificates`

## Path parameters

- `spaceIdentifier` string, required

## Query parameters

- `archived` boolean
- `firstResult` string
- `ids` string
- `orderBy` string
- `partialName` string
- `search` string
- `skip` integer
- `take` integer
- `tenant` string

## Response `200`

The requested Certificates

- CertificateResourceCollection
  - `Id` string
  - `Items` CertificateResource[]
    - `Archived` string, date-time
    - `CertificateChain` X509Certificate[]
      - `IssuerDistinguishedName` string
      - `NotAfter` string, date-time
      - `NotBefore` string, date-time
      - `SerialNumber` string
      - `SignatureAlgorithmName` string
      - `SubjectDistinguishedName` string
      - `Thumbprint` string
      - `Version` integer
    - `CertificateData` SensitiveValue
      - `HasValue` boolean
      - `Hint` string
      - `NewValue` string
    - `CertificateDataFormat` 'Pkcs12' | 'Der' | 'Pem' | 'Unknown'
    - `EnvironmentIds` string[]
    - `HasPrivateKey` boolean
    - `Id` string
    - `IsExpired` boolean
    - `IssuerCommonName` string
    - `IssuerDistinguishedName` string
    - `IssuerOrganization` string
    - `LastModifiedBy` string
    - `LastModifiedOn` string, date-time
    - `Links` object
    - `Name` string
    - `NotAfter` string, date-time
    - `NotBefore` string, date-time
    - `Notes` string
    - `Password` SensitiveValue
      - `HasValue` boolean
      - `Hint` string
      - `NewValue` string
    - `ReplacedBy` string
    - `SelfSigned` boolean
    - `SerialNumber` string
    - `SignatureAlgorithmName` string
    - `SpaceId` string
    - `SubjectAlternativeNames` string[]
    - `SubjectCommonName` string — The certificate subject's common name (CN). When creating a self-signed certificate this becomes the generated certificate's CN, and at least one of SubjectCommonName or SubjectOrganization must be supplied.
    - `SubjectDistinguishedName` string
    - `SubjectOrganization` string — The certificate subject's organization (O). When creating a self-signed certificate, at least one of SubjectCommonName or SubjectOrganization must be supplied.
    - `TenantedDeploymentParticipation` 'Untenanted' | 'TenantedOrUntenanted' | 'Tenanted'
    - `TenantIds` string[]
    - `TenantTags` string[]
    - `Thumbprint` string
    - `Version` integer
  - `ItemsPerPage` integer
  - `ItemType` string
  - `LastModifiedBy` string
  - `LastModifiedOn` string, date-time
  - `LastPageNumber` integer
  - `Links` object
  - `NumberOfPages` integer
  - `TotalResults` integer

## Other responses

- `400` — Bad request. Either the payload was not structurally valid or business rules did not permit the operation.
- `404` — Not found. One or more of the entities involved in the operation was not found.

---

[API](https://skmtc.net/octopus/apis/octopus-server-api.md) · [All operations](https://skmtc.net/octopus/apis/octopus-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/octopus/octopus-server-api/versions/bc9158facfc7/schema)