This API provides detailed information about the SSL certificate for a specified domain, including version, signature, fingerprints, issuer, subject, validity period, serial number, and cipher details.
curl -X GET "https://api.securitysurface.com/v1/search/ssl/cert?domain={domain}"
\
-H "apikey: your_api_key" \
-H "Content-Type: application/json"
Replace {domain} with the domain you want to query, and your_api_key with your actual API key.
| Parameter | Type | Location | Required | Description |
|---|---|---|---|---|
| domain | string | query | Yes | The domain to query, e.g., example.com |
{
"status": "ss_success",
"cert": {
"cert.version": "2",
"sigInfo.signature": "30:65:02:31:00:F9:A6:82:46:53:DB:6F:E5:58:FA:EE:1A:BC:FC:9A:1B:B7:EF:50:32:6A:37:C2:B0:96:B5:C3:E1:7A:6D:4F:B4:0B:F8:3D:37:F8:10:3F:15:41:28:DD:D0:F5:8B:3D:FB:02:30:64:63:78:E1:B2:E2:C0:5B:BA:56:B0:36:ED:5F:F4:30:C6:9E:A4:36:C2:B8:8E:1D:7F:46:3B:D5:FF:6E:B4:B3:14:30:33:F1:8C:EE:DD:3E:4F:4B:8F:D8:BF:98:D7:65",
"sigInfo.sigtype": "undefined",
"fingerprints.md5": "C3:39:79:FF:8B:C1:9A:94:82:0D:68:04:B3:68:18:81",
"fingerprints.sha1": "31:0D:B7:AF:4B:2B:C9:04:0C:83:44:70:1A:CA:08:D0:C6:93:81:E3",
"fingerprints.sha224": "E8:3F:E7:AF:6F:71:E2:A3:04:FA:A8:74:06:32:E8:47:58:F2:6C:B5:97:B1:25:EB:E2:17:30:F3",
"fingerprints.sha256": "45:59:43:CF:81:94:25:76:1D:1F:95:02:63:EB:F5:47:55:D8:D6:84:C2:55:35:94:39:76:F4:88:BC:79:D2:3B",
"fingerprints.sha384": "6E:1E:F3:D1:F9:EE:94:E3:6F:11:50:0B:04:7D:A5:68:3D:62:EA:72:B7:60:CC:E1:0C:3B:EC:FD:64:56:53:B4:93:7A:30:86:D5:87:21:32:93:B2:2E:A7:42:72:35:B6",
"fingerprints.sha512": "59:15:8F:93:E8:D7:DB:6E:27:AE:46:25:D1:6C:18:BA:58:C4:F7:45:02:C0:58:BC:28:60:AA:B0:37:0E:46:EE:FE:E1:54:2C:23:24:95:4B:E5:FD:AD:33:A9:4F:BA:1E:D7:AA:04:49:48:58:A7:1A:DB:01:D1:16:48:D5:67:C7",
"fingerprints": "C3:39:79:FF:8B:C1:9A:94:82:0D:68:04:B3:68:18:81",
"subject.oneLine": "\/C=US\/ST=California\/L=Los Angeles\/O=Internet Corporation for Assigned Names and Numbers\/CN=*.example.com",
"subject.hash": "FB859203",
"issuer.oneLine": "\/C=US\/O=DigiCert Inc\/CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1",
"issuer.hash": "A6570D26",
"notbefore": "2025\/1\/15 8:00:00",
"notafter": "2026\/1\/16 7:59:59",
"serialnumber": "0A:D8:93:BA:FA:68:B0:B7:FB:7A:40:4F:06:EC:AF:9A",
"cipher.name": "ECDHE-ECDSA-AES256-GCM-SHA384",
"cipher.bits.": "256",
"cipher.version": "TLSv1\/SSLv3",
"cipher.description": "ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(256) Mac=AEAD"
},
"raw": "Certificate:\r\n Data:\r\n Version: 3 (0x2)\r\n Serial Number:\r\n 0a:d8:93:ba:fa:68:b0:b7:fb:7a:40:4f:06:ec:af:9a\r\n Signature Algorithm: ecdsa-with-SHA384\r\n Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1\r\n Validity\r\n Not Before: Jan 15 00:00:00 2025 GMT\r\n Not After : Jan 15 23:59:59 2026 GMT\r\n Subject: C=US, ST=California, L=Los Angeles, O=Internet Corporation for Assigned Names and Numbers, CN=*.example.com\r\n Subject Public Key Info:\r\n Public Key Algorithm: id-ecPublicKey\r\n Public-Key: (256 bit)\r\n pub: \r\n 04:9a:48:97:84:2d:61:6c:08:c9:6a:14:a0:c8:38:\r\n 80:e6:00:c0:87:fa:99:57:0e:1b:00:e2:d8:87:92:\r\n 57:e7:08:fb:3c:5e:b0:d3:84:28:37:c1:24:11:8e:\r\n d3:20:71:74:bd:93:8f:4e:09:03:ce:02:3b:b0:e4:\r\n 66:73:cf:af:ee\r\n ASN1 OID: prime256v1\r\n NIST CURVE: P-256\r\n X509v3 extensions:\r\n X509v3 Authority Key Identifier: \r\n keyid:8A:23:EB:9E:6B:D7:F9:37:5D:F9:6D:21:39:76:9A:A1:67:DE:10:A8\r\n\r\n X509v3 Subject Key Identifier: \r\n F0:C1:6A:32:0D:EC:DA:C7:EA:8F:CD:0D:6D:19:12:59:D1:BE:72:ED\r\n X509v3 Subject Alternative Name: \r\n DNS:*.example.com, DNS:example.com\r\n X509v3 Certificate Policies: \r\n Policy: 2.23.140.1.2.2\r\n CPS: http:\/\/www.digicert.com\/CPS\r\n\r\n X509v3 Key Usage: critical\r\n Digital Signature, Key Agreement\r\n X509v3 Extended Key Usage: \r\n TLS Web Server Authentication, TLS Web Client Authentication\r\n X509v3 CRL Distribution Points: \r\n\r\n Full Name:\r\n URI:http:\/\/crl3.digicert.com\/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl\r\n\r\n Full Name:\r\n URI:http:\/\/crl4.digicert.com\/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl\r\n\r\n Authority Information Access: \r\n OCSP - URI:http:\/\/ocsp.digicert.com\r\n CA Issuers - URI:http:\/\/cacerts.digicert.com\/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt\r\n\r\n X509v3 Basic Constraints: critical\r\n CA:FALSE\r\n CT Precertificate SCTs: \r\n Signed Certificate Timestamp:\r\n Version : v1(0)\r\n Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:\r\n DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21\r\n Timestamp : Jan 15 01:01:25.319 2025 GMT\r\n Extensions: none\r\n Signature : ecdsa-with-SHA256\r\n 30:43:02:1F:24:17:0F:5A:4C:7C:D2:29:3B:B8:B6:16:\r\n E8:E1:AF:35:8B:C9:E0:D9:8E:47:64:57:73:DB:AF:88:\r\n 53:C7:E9:02:20:52:DB:AE:51:E9:C7:21:3E:54:35:62:\r\n 5F:7C:10:51:AB:7D:6D:50:68:BB:64:34:D2:AE:B3:34:\r\n 7F:8C:F5:55:AE\r\n Signed Certificate Timestamp:\r\n Version : v1(0)\r\n Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:\r\n 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0\r\n Timestamp : Jan 15 01:01:25.381 2025 GMT\r\n Extensions: none\r\n Signature : ecdsa-with-SHA256\r\n 30:44:02:20:70:AE:E8:D8:07:85:5D:50:BE:27:FF:1B:\r\n B0:47:AB:B7:22:30:61:FC:8D:D7:21:FF:1C:B8:2F:3A:\r\n D8:95:EB:17:02:20:72:30:53:2F:0E:11:A0:E2:C6:26:\r\n D4:CB:2B:0C:65:5E:75:CC:29:13:87:8D:D1:1B:99:70:\r\n 51:A6:5B:1C:09:72\r\n Signed Certificate Timestamp:\r\n Version : v1(0)\r\n Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:\r\n 5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3\r\n Timestamp : Jan 15 01:01:25.401 2025 GMT\r\n Extensions: none\r\n Signature : ecdsa-with-SHA256\r\n 30:45:02:20:68:58:7A:EF:21:10:DA:5C:20:9B:75:F5:\r\n EA:7D:A2:5A:31:10:14:82:36:6F:67:E9:38:DB:41:56:\r\n 26:D9:55:6C:02:21:00:F9:A6:CA:A3:5C:36:2C:20:46:\r\n F5:87:28:74:4B:C6:C1:37:73:B8:BB:6B:00:F7:38:AC:\r\n 28:89:58:8D:98:3C:C2\r\n Signature Algorithm: ecdsa-with-SHA384\r\n 30:65:02:31:00:f9:a6:82:46:53:db:6f:e5:58:fa:ee:1a:bc:\r\n fc:9a:1b:b7:ef:50:32:6a:37:c2:b0:96:b5:c3:e1:7a:6d:4f:\r\n b4:0b:f8:3d:37:f8:10:3f:15:41:28:dd:d0:f5:8b:3d:fb:02:\r\n 30:64:63:78:e1:b2:e2:c0:5b:ba:56:b0:36:ed:5f:f4:30:c6:\r\n 9e:a4:36:c2:b8:8e:1d:7f:46:3b:d5:ff:6e:b4:b3:14:30:33:\r\n f1:8c:ee:dd:3e:4f:4b:8f:d8:bf:98:d7:65"
}