Cert Spotter APIv0 (Deprecated)

Version 0 of the Cert Spotter API is deprecated and will be disabled on February 2, 2021.

In 2018, we announced version 1 of the Cert Spotter API, featuring several improvements over version 0, such as incremental monitoring and the ability to tailor the response fields to suit your needs. Since most users have now upgraded to APIv1, and we are no longer developing APIv0, APIv0 will be discontinued per the following schedule:

Starting August 10, 2020: newly-created accounts and accounts which have not recently used APIv0 will need to specify the following query string parameter to use APIv0: i_understand_this_api_is_deprecated_and_will_be_disabled_soon=yes

Starting November 2, 2020: we will perform periodic "brownouts" of APIv0. For one hour a day, some or all APIv0 requests will return an error.

Click for brownout schedule
Begin (UTC)End (UTC)Percentage of requests blocked
2020-11-02 14:00:00+002020-11-02 15:00:00+0025%
2020-11-03 15:00:00+002020-11-03 16:00:00+0025%
2020-11-04 16:00:00+002020-11-04 17:00:00+0025%
2020-11-05 17:00:00+002020-11-05 18:00:00+0025%
2020-11-06 18:00:00+002020-11-06 19:00:00+0025%
2020-11-07 19:00:00+002020-11-07 20:00:00+0025%
2020-11-08 20:00:00+002020-11-08 21:00:00+0025%
2020-11-09 21:00:00+002020-11-09 22:00:00+0025%
2020-11-10 22:00:00+002020-11-10 23:00:00+0025%
2020-11-11 23:00:00+002020-11-12 00:00:00+0025%
2020-11-12 00:00:00+002020-11-12 01:00:00+0025%
2020-11-13 01:00:00+002020-11-13 02:00:00+0025%
2020-11-14 02:00:00+002020-11-14 03:00:00+0025%
2020-11-15 03:00:00+002020-11-15 04:00:00+0025%
2020-11-16 04:00:00+002020-11-16 05:00:00+0025%
2020-11-17 05:00:00+002020-11-17 06:00:00+0025%
2020-11-18 06:00:00+002020-11-18 07:00:00+0025%
2020-11-19 07:00:00+002020-11-19 08:00:00+0025%
2020-11-20 08:00:00+002020-11-20 09:00:00+0025%
2020-11-21 09:00:00+002020-11-21 10:00:00+0025%
2020-11-22 10:00:00+002020-11-22 11:00:00+0025%
2020-11-23 11:00:00+002020-11-23 12:00:00+0025%
2020-11-24 12:00:00+002020-11-24 13:00:00+0025%
2020-11-25 13:00:00+002020-11-25 14:00:00+0025%
2020-11-30 22:00:00+002020-11-30 23:00:00+0050%
2020-12-01 23:00:00+002020-12-02 00:00:00+0050%
2020-12-02 00:00:00+002020-12-02 01:00:00+0050%
2020-12-03 01:00:00+002020-12-03 02:00:00+0050%
2020-12-04 02:00:00+002020-12-04 03:00:00+0050%
2020-12-05 03:00:00+002020-12-05 04:00:00+0050%
2020-12-06 04:00:00+002020-12-06 05:00:00+0050%
2020-12-07 05:00:00+002020-12-07 06:00:00+0050%
2020-12-08 06:00:00+002020-12-08 07:00:00+0050%
2020-12-09 07:00:00+002020-12-09 08:00:00+0050%
2020-12-10 08:00:00+002020-12-10 09:00:00+0050%
2020-12-11 09:00:00+002020-12-11 10:00:00+0050%
2020-12-12 10:00:00+002020-12-12 11:00:00+0050%
2020-12-13 11:00:00+002020-12-13 12:00:00+0050%
2020-12-14 12:00:00+002020-12-14 13:00:00+0050%
2020-12-15 13:00:00+002020-12-15 14:00:00+0050%
2020-12-16 14:00:00+002020-12-16 15:00:00+0050%
2020-12-17 15:00:00+002020-12-17 16:00:00+0050%
2020-12-18 16:00:00+002020-12-18 17:00:00+0050%
2020-12-19 17:00:00+002020-12-19 18:00:00+0050%
2020-12-20 18:00:00+002020-12-20 19:00:00+0050%
2020-12-21 19:00:00+002020-12-21 20:00:00+0050%
2020-12-22 20:00:00+002020-12-22 21:00:00+0050%
2020-12-23 21:00:00+002020-12-23 22:00:00+0050%
2021-01-04 06:00:00+002021-01-04 07:00:00+00100%
2021-01-05 07:00:00+002021-01-05 08:00:00+00100%
2021-01-06 08:00:00+002021-01-06 09:00:00+00100%
2021-01-07 09:00:00+002021-01-07 10:00:00+00100%
2021-01-08 10:00:00+002021-01-08 11:00:00+00100%
2021-01-09 11:00:00+002021-01-09 12:00:00+00100%
2021-01-10 12:00:00+002021-01-10 13:00:00+00100%
2021-01-11 13:00:00+002021-01-11 14:00:00+00100%
2021-01-12 14:00:00+002021-01-12 15:00:00+00100%
2021-01-13 15:00:00+002021-01-13 16:00:00+00100%
2021-01-14 16:00:00+002021-01-14 17:00:00+00100%
2021-01-15 17:00:00+002021-01-15 18:00:00+00100%
2021-01-16 18:00:00+002021-01-16 19:00:00+00100%
2021-01-17 19:00:00+002021-01-17 20:00:00+00100%
2021-01-18 20:00:00+002021-01-18 21:00:00+00100%
2021-01-19 21:00:00+002021-01-19 22:00:00+00100%
2021-01-20 22:00:00+002021-01-20 23:00:00+00100%
2021-01-21 23:00:00+002021-01-22 00:00:00+00100%
2021-01-22 00:00:00+002021-01-22 01:00:00+00100%
2021-01-23 01:00:00+002021-01-23 02:00:00+00100%
2021-01-24 02:00:00+002021-01-24 03:00:00+00100%
2021-01-25 03:00:00+002021-01-25 04:00:00+00100%
2021-01-26 04:00:00+002021-01-26 05:00:00+00100%
2021-01-27 05:00:00+002021-01-27 06:00:00+00100%

February 2, 2021: we will disable APIv0 entirely.

Please upgrade to version 1 of the Cert Spotter API as soon as possible. Please get in touch if you have any questions as you make the transition.

List certificates

GET https://api.certspotter.com/v0/certs?domain=DOMAIN

The following parameters may be specified in the query string:

domain Return certificates for the given domain and all sub-domains. Also returns matching wildcard certificates. Must be at or below a registered domain. Required.

Response: JSON array of certificate objects

Pagination

The Cert Spotter API returns a limited number of certificates in a single response. To retrieve additional certificates, load the "next" URL in the response's HTTP Link header, if present.

Get certificate object

GET https://api.certspotter.com/v0/certs/SHA256

SHA256 is the hex-encoded SHA-256 digest of the (pre-)certificate.

Response: certificate object

Certificate Object

A (pre-)certificate is represented by a JSON object with the following fields:

type string cert or precert
dns_names list of strings DNS identifiers, from both the Subject CN and the DNS SANs
sha256 string The hex-encoded SHA-256 digest of the raw X.509 (pre-)certificate
pubkey_sha256 string The hex-encoded SHA-256 digest of the Subject Public Key Info
issuer string The distinguished name of the certificate's issuer
not_before string The not before date, in RFC3339 format (e.g. 2016-06-16T00:00:00-00:00)
not_after string The not after date, in RFC3339 format (e.g. 2016-06-16T00:00:00-00:00)
logs list of log references A list of Certificate Transparency logs containing this (pre-)certificate
data string The raw X.509 (pre-)certificate, encoded in base64

Log Reference Object

A log reference describes when and where a (pre-)certificate has been logged, and is represented by a JSON object with the following fields:

id string The ID of the Certificate Transparency log, encoded in base64
index number The 0-based index of the (pre-)certificate's entry in the log
timestamp string The time at which the (pre-)certificate was submitted to this log, in RFC3339 format (e.g. 2017-05-04T13:39:21.071-00:00)

Get X.509 certificate (PEM)

GET https://api.certspotter.com/v0/certs/SHA256.pem

SHA256 is the hex-encoded SHA-256 digest of the X.509 (pre-)certificate.

Response: raw X.509 (pre-)certificate, encoded in PEM

Get X.509 certificate (DER)

GET https://api.certspotter.com/v0/certs/SHA256.der

SHA256 is the hex-encoded SHA-256 digest of the X.509 (pre-)certificate.

Response: raw X.509 (pre-)certificate