This API provides detailed information about the SSL certificate for a specified domain, including version, signature, fingerprints, issuer, subject, validity period, serial number, and cipher details.
curl -X GET "https://api.securitysurface.com/v1/search/ssl/cert?domain={domain}&timerange={timerange}"
\
-H "apikey: your_api_key" \
-H "Content-Type: application/json"
Replace {domain} with the domain you want to query, {timerange} with the desired time range (0 for real-time, 7 for one week, 30 for one month), and your_api_key with your actual API key.
| Parameter | Type | Location | Required | Description |
|---|---|---|---|---|
| domain | string | query | Yes | The domain to query, e.g., example.com |
| timerange | int | query | No | The time range for data: 0 (real-time), 7 (one week), 30 (one month). Defaults to 0 if not provided |
{
"cert": {
"cert.version": "2",
"sigInfo.signature": "04:E1:6E:02:3E:0D:E3:23:46:F4:E3:96:35:05:93:35:22:02:0B:84:5D:E2:73:86:D4:74:4F:FC:1B:27:AF:3E:CA:AD:C3:CE:46:D6:FA:0F:E2:71:F9:0D:1A:9A:13:B7:D5:08:48:BD:50:58:B3:5E:20:63:86:29:CA:3E:CC:CC:78:26:E1:59:8F:5D:CA:8B:BC:49:31:6F:61:BD:42:FF:61:62:E1:22:35:24:26:9B:57:EB:E5:00:0D:FF:40:33:6C:46:C2:33:77:08:98:B2:7A:F6:43:F9:6D:48:DF:BF:FE:FA:28:1E:7B:8A:CF:2D:61:FF:6C:87:98:A4:2C:62:9A:BB:10:8C:FF:34:48:70:66:B7:6D:72:C3:69:F9:39:4B:68:39:56:BD:A1:B3:6D:F4:77:F3:46:5B:5C:19:AC:4F:B3:74:6B:8C:C5:F1:89:CC:93:FE:0C:01:6F:88:17:DC:42:71:60:E3:ED:73:30:42:9C:A9:2F:3B:A2:78:8E:C8:6F:BA:D1:13:0C:D0:C7:5E:8C:10:FB:01:2E:37:9B:DB:AC:F7:A1:AC:BA:7F:F8:92:E7:CB:41:44:C8:15:F9:F3:C4:BB:AD:51:5F:BE:DE:C7:AC:86:07:9F:40:EC:B9:0B:F6:B2:8B:CC:B5:55:33:66:BA:33:C2:C4:F0:A2:E9",
"sigInfo.sigtype": "undefined",
"fingerprints.md5": "83:DC:51:95:F2:17:34:E9:88:90:0A:36:88:DD:FE:D4",
"fingerprints.sha1": "4D:A2:5A:6D:5E:F6:2C:5F:95:C7:BD:0A:73:EA:3C:17:7B:36:99:9D",
"fingerprints.sha224": "B4:4A:22:DD:8F:2A:48:12:1C:04:08:B6:00:9F:C0:00:01:E9:2A:C1:8D:EF:1B:12:3A:CE:C4:6B",
"fingerprints.sha256": "EF:BA:26:D8:C1:CE:37:79:AC:77:63:0A:90:F8:21:63:A3:D6:89:2E:D6:AF:EE:40:86:72:CF:19:EB:A7:A3:62",
"fingerprints.sha384": "A8:23:4E:B7:69:3C:FA:CD:1B:FF:BC:00:B1:94:91:E5:B4:32:EF:4F:55:42:E8:93:B6:F4:D2:B6:54:BA:BF:E0:5F:92:22:3F:D5:A9:72:28:D5:30:B2:94:37:11:BF:F7",
"fingerprints.sha512": "30:D1:93:BF:AB:2B:50:F9:DE:26:6E:D6:4D:AA:8C:DE:20:B6:D5:8C:A2:11:0C:F3:5D:92:31:C8:8C:40:ED:AF:11:05:7D:66:6A:FD:56:50:B7:C0:10:5B:E8:7B:0F:7F:3C:EB:B2:02:F2:69:E7:72:2B:B5:06:82:E6:C4:3D:06",
"fingerprints": "83:DC:51:95:F2:17:34:E9:88:90:0A:36:88:DD:FE:D4",
"subject.oneLine": "/C=US/ST=California/L=Los Angeles/O=Internet\\xC2\\xA0Corporation\\xC2\\xA0for\\xC2\\xA0Assigned\\xC2\\xA0Names\\xC2\\xA0and\\xC2\\xA0Numbers/CN=www.example.org",
"subject.hash": "DF4C0278",
"issuer.oneLine": "/C=US/O=DigiCert Inc/CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1",
"issuer.hash": "9F4C149E",
"notbefore": "2024/1/30 8:00:00",
"notafter": "2025/3/2 7:59:59",
"serialnumber": "07:5B:CE:F3:06:89:C8:AD:DF:13:E5:1A:F4:AF:E1:87",
"cipher.name": "ECDHE-RSA-AES128-GCM-SHA256",
"cipher.bits.": "128",
"cipher.version": "TLSv1/SSLv3",
"cipher.description": "ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(128) Mac=AEAD"
},
"raw": "Certificate:\r\n Data:\r\n Version: 3 (0x2)\r\n Serial Number:\r\n 07:5b:ce:f3:06:89:c8:ad:df:13:e5:1a:f4:af:e1:87\r\n Signature Algorithm: sha256WithRSAEncryption\r\n Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1\r\n Validity\r\n Not Before: Jan 30 00:00:00 2024 GMT\r\n Not After : Mar 1 23:59:59 2025 GMT\r\n Subject: C=US, ST=California, L=Los Angeles, O=Internet\\xC2\\xA0Corporation\\xC2\\xA0for\\xC2\\xA0Assigned\\xC2\\xA0Names\\xC2\\xA0and\\xC2\\xA0Numbers, CN=www.example.org\r\n Subject Public Key Info:\r\n Public Key Algorithm: rsaEncryption\r\n Public-Key: (2048 bit)\r\n Modulus:\r\n 00:86:85:0f:bb:0e:f9:ca:5f:d9:f5:e0:0a:32:2c:\r\n 33:d9:aa:0e:07:29:a8:2f:08:ad:78:bd:c2:06:bf:\r\n f7:2d:2b:a6:a7:27:3d:53:a6:4c:c3:4b:b2:27:77:\r\n 20:d6:c1:54:49:b8:08:da:f9:70:a9:61:f6:b2:49:\r\n 9d:69:57:da:fb:6d:24:34:72:2e:47:f0:04:3f:9d:\r\n b1:5b:e2:bc:66:31:59:32:e6:a9:7e:bf:d4:b0:d4:\r\n 64:f5:6b:ca:7b:ff:72:5b:5e:9a:d8:3f:d4:06:b2:\r\n f3:c8:dc:8f:66:5a:46:84:66:a8:18:15:79:a7:08:\r\n ce:05:3c:fb:39:89:ef:6d:fa:4e:71:52:7b:b7:e4:\r\n a0:a4:9c:96:c0:61:3d:a4:0a:70:4d:c3:8e:cd:6e:\r\n b3:32:6c:f2:c7:44:09:04:dd:a0:55:fd:23:a5:20:\r\n 78:b2:85:5e:d8:3b:ad:17:ff:85:c5:b9:74:8d:33:\r\n b9:b8:57:6e:b5:bc:69:65:db:0b:3c:92:55:99:f4:\r\n 73:b4:64:24:ca:67:4c:28:99:cc:dc:67:3d:79:c7:\r\n 16:9c:2b:e6:ab:aa:aa:35:72:37:f6:81:2a:48:e8:\r\n 3f:4e:19:9a:bf:9e:46:aa:32:93:ff:a5:b2:5a:b4:\r\n b1:2f:1e:69:84:92:1d:b0:b9:8d:af:f2:31:6c:95:\r\n 86:f3\r\n Exponent: 65537 (0x10001)\r\n X509v3 extensions:\r\n X509v3 Authority Key Identifier: \r\n keyid:74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17\r\n\r\n X509v3 Subject Key Identifier: \r\n 4C:FE:D0:12:4D:2E:21:CF:6B:FA:F2:F2:B8:4C:49:02:1D:31:91:8A\r\n X509v3 Subject Alternative Name: \r\n DNS:www.example.org, DNS:example.net, DNS:example.edu, DNS:example.com, DNS:example.org, DNS:www.example.com, DNS:www.example.edu, DNS:www.example.net\r\n X509v3 Certificate Policies: \r\n Policy: 2.23.140.1.2.2\r\n CPS: http://www.digicert.com/CPS\r\n\r\n X509v3 Key Usage: critical\r\n Digital Signature, Key Encipherment\r\n X509v3 Extended Key Usage: \r\n TLS Web Server Authentication, TLS Web Client Authentication\r\n X509v3 CRL Distribution Points: \r\n\r\n Full Name:\r\n URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl\r\n\r\n Full Name:\r\n URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl\r\n\r\n Authority Information Access: \r\n OCSP - URI:http://ocsp.digicert.com\r\n CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\r\n\r\n X509v3 Basic Constraints: critical\r\n CA:FALSE\r\n CT Precertificate SCTs: \r\n Signed Certificate Timestamp:\r\n Version : v1(0)\r\n Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:\r\n 1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF\r\n Timestamp : Jan 30 19:22:50.340 2024 GMT\r\n Extensions: none\r\n Signature : ecdsa-with-SHA256\r\n 30:43:02:1F:40:51:0A:0C:4F:6C:10:55:C6:17:16:67:\r\n 6E:9A:F0:90:9E:F3:73:F5:25:9E:B0:9A:FE:7A:1A:C5:\r\n 5C:C8:C0:02:20:38:29:31:B1:28:E4:72:48:4D:34:4F:\r\n 9E:8C:93:E2:61:BC:70:BA:D6:8C:4B:E1:72:15:1D:11:\r\n C5:94:BA:4D:53\r\n Signed Certificate Timestamp:\r\n Version : v1(0)\r\n Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:\r\n 87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8\r\n Timestamp : Jan 30 19:22:50.288 2024 GMT\r\n Extensions: none\r\n Signature : ecdsa-with-SHA256\r\n 30:45:02:20:5D:BF:96:77:A5:91:5B:7E:0A:0C:DE:D1:\r\n A9:09:33:37:67:10:4C:42:CC:41:45:27:53:4B:A7:7C:\r\n 77:63:40:73:02:21:00:B2:E8:09:3F:66:4C:C3:7D:3B:\r\n 21:73:20:15:79:32:45:D5:2F:2B:93:7F:63:80:CC:03:\r\n 9A:ED:DF:31:D8:7E:97\r\n Signed Certificate Timestamp:\r\n Version : v1(0)\r\n Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:\r\n D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50\r\n Timestamp : Jan 30 19:22:50.335 2024 GMT\r\n Extensions: none\r\n Signature : ecdsa-with-SHA256\r\n 30:46:02:21:00:E0:AA:21:FD:58:B3:75:05:35:B6:36:\r\n 76:13:65:46:81:64:97:5E:4C:27:42:68:98:86:60:1E:\r\n 29:C5:4B:1D:E0:02:21:00:FB:24:81:85:B1:D1:A8:97:\r\n B9:2C:B3:6A:5E:E2:56:2B:0A:03:D5:73:E8:86:66:4B:\r\n AA:9E:3D:BA:86:A8:6B:D1\r\n Signature Algorithm: sha256WithRSAEncryption\r\n 04:e1:6e:02:3e:0d:e3:23:46:f4:e3:96:35:05:93:35:22:02:\r\n 0b:84:5d:e2:73:86:d4:74:4f:fc:1b:27:af:3e:ca:ad:c3:ce:\r\n 46:d6:fa:0f:e2:71:f9:0d:1a:9a:13:b7:d5:08:48:bd:50:58:\r\n b3:5e:20:63:86:29:ca:3e:cc:cc:78:26:e1:59:8f:5d:ca:8b:\r\n bc:49:31:6f:61:bd:42:ff:61:62:e1:22:35:24:26:9b:57:eb:\r\n e5:00:0d:ff:40:33:6c:46:c2:33:77:08:98:b2:7a:f6:43:f9:\r\n 6d:48:df:bf:fe:fa:28:1e:7b:8a:cf:2d:61:ff:6c:87:98:a4:\r\n 2c:62:9a:bb:10:8c:ff:34:48:70:66:b7:6d:72:c3:69:f9:39:\r\n 4b:68:39:56:bd:a1:b3:6d:f4:77:f3:46:5b:5c:19:ac:4f:b3:\r\n 74:6b:8c:c5:f1:89:cc:93:fe:0c:01:6f:88:17:dc:42:71:60:\r\n e3:ed:73:30:42:9c:a9:2f:3b:a2:78:8e:c8:6f:ba:d1:13:0c:\r\n d0:c7:5e:8c:10:fb:01:2e:37:9b:db:ac:f7:a1:ac:ba:7f:f8:\r\n 92:e7:cb:41:44:c8:15:f9:f3:c4:bb:ad:51:5f:be:de:c7:ac:\r\n 86:07:9f:40:ec:b9:0b:f6:b2:8b:cc:b5:55:33:66:ba:33:c2:\r\n c4:f0:a2:e9"
}