SSL/TLS Certificate API
Search certificate records sourced from Certificate Transparency data, filter by date and hour, inspect certificate metadata, retrieve recent records after a configurable settling gap, and fetch parsed certificate detail by result ID.
What the feed contains
The API exposes certificate metadata derived from Certificate Transparency data. Search results include certificate IDs, serial numbers, subject and issuer common names, validity timestamps, recorded timestamps, SHA-256 thumbprints, and Subject Alternative Names.
Certificate activity is useful as a complementary signal alongside Domain Activity and DNS data. A hostname appearing in certificate data indicates certificate issuance or observation in the source data; it should not be treated as proof that the hostname is currently active in DNS.
Search by date, narrow exact-date queries to UTC hour windows, select either valid-from or recorded time for date filtering, page and sort the results, or request a count before reading data pages.
API endpoint
Read the SSL/TLS Certificates API v2 reference for endpoint parameters, count semantics, recent-feed behaviour, and response fields.
Features
Certificate Transparency Search
Search certificate records sourced from Certificate Transparency data using date filters and an optional keyword filter.
Date and Hour Controls
Select exact UTC days or hours, compare against a date boundary, and choose valid-from or recorded time for the date predicate.
Certificate Metadata
Results include subject CN, Subject Alternative Names, issuer CN, serial number, validity data, recorded time, and SHA-256 thumbprint.
Recent Feed with Settling Gap
Read the newest qualifying records older than a configurable cutoff, useful when your pipeline needs to avoid the newest unsettled interval.
Counts, Paging, and Sorting
Use stats mode for a matching count, then page normal results with start/limit and choose from the supported sort fields and direction.
Parsed Certificate Detail
Retrieve parsed X.509 or precertificate detail by search-result ID, including additional validity fields, SHA-256 thumbprint, and PEM data.
API behaviour at a glance
| Capability | Current API v2 behaviour | Notes |
|---|---|---|
| Certificate search | Date + optional keyword | Exact-date and date-comparison modes |
| Date source | valid_from or recorded_at | Sorting is configured separately |
| Page size | Up to 5,000 requested rows | Offset pagination with start |
| Certificate detail | Parsed CT entry + PEM | X.509 certificates and precertificates |
Certificate-data availability depends on what is present in the underlying Certificate Transparency source data. The product does not represent certificate observations as a complete inventory of active domains or DNS hostnames.