SSL certificate.
| JSON representation | 
|---|
| { "certSignature": { object ( | 
| Fields | |
|---|---|
| certSignature | 
 Certificate's signature and algorithm. | 
| extension | 
 (DEPRECATED) certificate's extension. | 
| certExtensions | 
 Certificate's extensions. | 
| firstSeenTime | 
 Date the certificate was first retrieved by VirusTotal. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples:  | 
| issuer | 
 Certificate's issuer data. | 
| ec | 
 EC public key information. | 
| serialNumber | 
 Certificate's serial number hexdump. | 
| signatureAlgorithm | 
 Algorithm used for the signature (for example, "sha1RSA"). | 
| size | 
 Certificate content length. | 
| subject | 
 Certificate's subject data. | 
| thumbprint | 
 Certificate's content SHA1 hash. | 
| thumbprintSha256 | 
 Certificate's content SHA256 hash. | 
| validity | 
 Certificate's validity period. | 
| version | 
 Certificate version (typically "V1", "V2" or "V3"). | 
| publicKey | 
 Public key information. | 
CertSignature
Certificate's signature and algorithm.
| JSON representation | 
|---|
| { "signature": string, "signatureAlgorithm": string } | 
| Fields | |
|---|---|
| signature | 
 Signature. | 
| signatureAlgorithm | 
 Algorithm. | 
Extension
Certificate's extensions.
| JSON representation | 
|---|
| {
  "ca": boolean,
  "subjectKeyId": string,
  "authorityKeyId": {
    object ( | 
| Fields | |
|---|---|
| ca | 
 Whether the subject acts as a certificate authority (CA) or not. | 
| subjectKeyId | 
 Identifies the public key being certified. | 
| authorityKeyId | 
 Identifies the public key to be used to verify the signature on this certificate or CRL. | 
| keyUsage | 
 The purpose for which the certified public key is used. | 
| caInfoAccess | 
 Authority information access locations are URLs that are added to a certificate in its authority information access extension. | 
| crlDistributionPoints | 
 CRL distribution points to which a certificate user should refer to ascertain if the certificate has been revoked. | 
| extendedKeyUsage | 
 One or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension field. | 
| subjectAlternativeName | 
 Contains one or more alternative names, using any of a variety of name forms, for the entity that is bound by the CA to the certified public key. | 
| certificatePolicies | 
 Different certificate policies will relate to different applications which may use the certified key. | 
| netscapeCertComment | 
 Used to include free-form text comments inside certificates. | 
| certTemplateNameDc | 
 BMP data value "DomainController". See MS Q291010. | 
| netscapeCertificate | 
 Identify whether the certificate subject is an SSL client, an SSL server, or a CA. | 
| peLogotype | 
 Whether the certificate includes a logotype. | 
| oldAuthorityKeyId | 
 Whether the certificate has an old authority key identifier extension. | 
AuthorityKeyId
Identifies the public key to be used to verify the signature on this certificate or CRL.
| JSON representation | 
|---|
| { "keyid": string, "serialNumber": string } | 
| Fields | |
|---|---|
| keyid | 
 Key hexdump. | 
| serialNumber | 
 Serial number hexdump. | 
Subject
Subject data.
| JSON representation | 
|---|
| { "countryName": string, "commonName": string, "locality": string, "organization": string, "organizationalUnit": string, "stateOrProvinceName": string } | 
| Fields | |
|---|---|
| countryName | 
 C: Country name. | 
| commonName | 
 CN: CommonName. | 
| locality | 
 L: Locality. | 
| organization | 
 O: Organization. | 
| organizationalUnit | 
 OU: OrganizationalUnit. | 
| stateOrProvinceName | 
 ST: StateOrProvinceName. | 
EC
EC public key information.
| JSON representation | 
|---|
| { "oid": string, "pub": string } | 
| Fields | |
|---|---|
| oid | 
 Curve name. | 
| pub | 
 Public key hexdump. | 
Validity
Defines certificate's validity period.
| JSON representation | 
|---|
| { "expiryTime": string, "issueTime": string } | 
| Fields | |
|---|---|
| expiryTime | 
 Expiry date. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples:  | 
| issueTime | 
 Issue date. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples:  | 
PublicKey
Subject public key info.
| JSON representation | 
|---|
| {
  "algorithm": string,
  "rsa": {
    object ( | 
| Fields | |
|---|---|
| algorithm | 
 Any of "RSA", "DSA" or "EC". Indicates the algorithm used to generate the certificate. | 
| rsa | 
 RSA public key information. | 
RSA
RSA public key information.
| JSON representation | 
|---|
| { "keySize": string, "modulus": string, "exponent": string } | 
| Fields | |
|---|---|
| keySize | 
 Key size. | 
| modulus | 
 Key modulus hexdump. | 
| exponent | 
 Key exponent hexdump. |