Search certificates - Infrawatch

Search certificates

curl --request GET \
  --url https://api.infrawatch.com/api/v1/search/certificates \
  --header 'X-API-Key: <api-key>'

const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};

fetch('https://api.infrawatch.com/api/v1/search/certificates', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.infrawatch.com/api/v1/search/certificates"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "certificates": [
    {
      "is_ca": false,
      "is_precert": true,
      "is_self_signed": false,
      "issuer_dn": "CN=Example Issuer",
      "names": [
        {
          "is_wildcard": false,
          "registrable_domain": "example.com",
          "source_kind": [
            "san_dns"
          ],
          "value": "example.com"
        }
      ],
      "not_after": "2025-04-01T00:00:00Z",
      "not_before": "2025-01-01T00:00:00Z",
      "public_key": {
        "algorithm": "RSA",
        "bits": 2048
      },
      "registrable_domains": [
        "example.com"
      ],
      "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "signature_algorithm": "SHA256-RSA",
      "validity_days": 90
    }
  ],
  "pagination": {
    "has_more": false,
    "limit": 25,
    "offset": 0,
    "total": 1,
    "total_relation": "eq"
  },
  "query": "certificate.names.value=example.com"
}

GET

https://api.infrawatch.com/api/v1

/

search

/

certificates

Search certificates

curl --request GET \
  --url https://api.infrawatch.com/api/v1/search/certificates \
  --header 'X-API-Key: <api-key>'

const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};

fetch('https://api.infrawatch.com/api/v1/search/certificates', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.infrawatch.com/api/v1/search/certificates"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "certificates": [
    {
      "is_ca": false,
      "is_precert": true,
      "is_self_signed": false,
      "issuer_dn": "CN=Example Issuer",
      "names": [
        {
          "is_wildcard": false,
          "registrable_domain": "example.com",
          "source_kind": [
            "san_dns"
          ],
          "value": "example.com"
        }
      ],
      "not_after": "2025-04-01T00:00:00Z",
      "not_before": "2025-01-01T00:00:00Z",
      "public_key": {
        "algorithm": "RSA",
        "bits": 2048
      },
      "registrable_domains": [
        "example.com"
      ],
      "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
      "signature_algorithm": "SHA256-RSA",
      "validity_days": 90
    }
  ],
  "pagination": {
    "has_more": false,
    "limit": 25,
    "offset": 0,
    "total": 1,
    "total_relation": "eq"
  },
  "query": "certificate.names.value=example.com"
}

Authorizations

X-API-Key

string

header

required

Infrawatch API key. Supply the complete key directly as the header value.

Query Parameters

q

string

required

Selective certificate InfraQL expression, limited to 8192 UTF-8 bytes after URL decoding. Exact SHA, bounded date, name, issuer, and other schema-advertised fields are supported subject to the certificate cost rules.

Required string length: 1 - 8192

history

enum<string>

default:recent

Recent searches the current certificate index. All searches every published historical cohort and may cost more.

Available options:

recent,

all

limit

integer

default:25

Certificate page size.

Required range: 1 <= x <= 50

cursor

string

Opaque continuation token that expires 15 minutes after the first page and is bound to the dataset, normalized query, and resolved visibility context. Cannot be combined with offset. If it is invalid or expired, restart pagination without a cursor. Clients must not parse or persist it as a durable bookmark.

Required string length: 1 - 4096

Response

Matching immutable certificates.

certificates

object[]

required

Maximum array length: 50

Show child attributes

pagination

object

required

Show child attributes

query

string

required

Required string length: 1 - 8192