SSL certificate.
| JSON representation | 
|---|
{ "certSignature": { object (  | 
            
| Fields | |
|---|---|
certSignature | 
              
                 
 Certificate's signature and algorithm.  | 
            
extension | 
              
                 
 (DEPRECATED) certificate's extension.  | 
            
certExtensions | 
              
                 
 Certificate's extensions.  | 
            
firstSeenTime | 
              
                 
 Date the certificate was first retrieved by VirusTotal. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples:   | 
            
issuer | 
              
                 
 Certificate's issuer data.  | 
            
ec | 
              
                 
 EC public key information.  | 
            
serialNumber | 
              
                 
 Certificate's serial number hexdump.  | 
            
signatureAlgorithm | 
              
                 
 Algorithm used for the signature (for example, "sha1RSA").  | 
            
size | 
              
                 
 Certificate content length.  | 
            
subject | 
              
                 
 Certificate's subject data.  | 
            
thumbprint | 
              
                 
 Certificate's content SHA1 hash.  | 
            
thumbprintSha256 | 
              
                 
 Certificate's content SHA256 hash.  | 
            
validity | 
              
                 
 Certificate's validity period.  | 
            
version | 
              
                 
 Certificate version (typically "V1", "V2" or "V3").  | 
            
publicKey | 
              
                 
 Public key information.  | 
            
CertSignature
Certificate's signature and algorithm.
| JSON representation | 
|---|
{ "signature": string, "signatureAlgorithm": string }  | 
              
| Fields | |
|---|---|
signature | 
                
                   
 Signature.  | 
              
signatureAlgorithm | 
                
                   
 Algorithm.  | 
              
Extension
Certificate's extensions.
| JSON representation | 
|---|
{
  "ca": boolean,
  "subjectKeyId": string,
  "authorityKeyId": {
    object ( | 
              
| Fields | |
|---|---|
ca | 
                
                   
 Whether the subject acts as a certificate authority (CA) or not.  | 
              
subjectKeyId | 
                
                   
 Identifies the public key being certified.  | 
              
authorityKeyId | 
                
                   
 Identifies the public key to be used to verify the signature on this certificate or CRL.  | 
              
keyUsage | 
                
                   
 The purpose for which the certified public key is used.  | 
              
caInfoAccess | 
                
                   
 Authority information access locations are URLs that are added to a certificate in its authority information access extension.  | 
              
crlDistributionPoints | 
                
                   
 CRL distribution points to which a certificate user should refer to ascertain if the certificate has been revoked.  | 
              
extendedKeyUsage | 
                
                   
 One or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension field.  | 
              
subjectAlternativeName | 
                
                   
 Contains one or more alternative names, using any of a variety of name forms, for the entity that is bound by the CA to the certified public key.  | 
              
certificatePolicies | 
                
                   
 Different certificate policies will relate to different applications which may use the certified key.  | 
              
netscapeCertComment | 
                
                   
 Used to include free-form text comments inside certificates.  | 
              
certTemplateNameDc | 
                
                   
 BMP data value "DomainController". See MS Q291010.  | 
              
netscapeCertificate | 
                
                   
 Identify whether the certificate subject is an SSL client, an SSL server, or a CA.  | 
              
peLogotype | 
                
                   
 Whether the certificate includes a logotype.  | 
              
oldAuthorityKeyId | 
                
                   
 Whether the certificate has an old authority key identifier extension.  | 
              
AuthorityKeyId
Identifies the public key to be used to verify the signature on this certificate or CRL.
| JSON representation | 
|---|
{ "keyid": string, "serialNumber": string }  | 
              
| Fields | |
|---|---|
keyid | 
                
                   
 Key hexdump.  | 
              
serialNumber | 
                
                   
 Serial number hexdump.  | 
              
Subject
Subject data.
| JSON representation | 
|---|
{ "countryName": string, "commonName": string, "locality": string, "organization": string, "organizationalUnit": string, "stateOrProvinceName": string }  | 
              
| Fields | |
|---|---|
countryName | 
                
                   
 C: Country name.  | 
              
commonName | 
                
                   
 CN: CommonName.  | 
              
locality | 
                
                   
 L: Locality.  | 
              
organization | 
                
                   
 O: Organization.  | 
              
organizationalUnit | 
                
                   
 OU: OrganizationalUnit.  | 
              
stateOrProvinceName | 
                
                   
 ST: StateOrProvinceName.  | 
              
EC
EC public key information.
| JSON representation | 
|---|
{ "oid": string, "pub": string }  | 
              
| Fields | |
|---|---|
oid | 
                
                   
 Curve name.  | 
              
pub | 
                
                   
 Public key hexdump.  | 
              
Validity
Defines certificate's validity period.
| JSON representation | 
|---|
{ "expiryTime": string, "issueTime": string }  | 
              
| Fields | |
|---|---|
expiryTime | 
                
                   
 Expiry date. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples:   | 
              
issueTime | 
                
                   
 Issue date. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples:   | 
              
PublicKey
Subject public key info.
| JSON representation | 
|---|
{
  "algorithm": string,
  "rsa": {
    object ( | 
              
| Fields | |
|---|---|
algorithm | 
                
                   
 Any of "RSA", "DSA" or "EC". Indicates the algorithm used to generate the certificate.  | 
              
rsa | 
                
                   
 RSA public key information.  | 
              
RSA
RSA public key information.
| JSON representation | 
|---|
{ "keySize": string, "modulus": string, "exponent": string }  | 
              
| Fields | |
|---|---|
keySize | 
                
                   
 Key size.  | 
              
modulus | 
                
                   
 Key modulus hexdump.  | 
              
exponent | 
                
                   
 Key exponent hexdump.  |