Skip to main content
GET
Get a certificate

Authorizations

Authorization
string
header
required

JWT bearer token issued by the identity provider.

Path Parameters

certificateId
string<uuid>
required

Certificate id.

Response

OK

daysToExpiry
integer<int64>
required

Whole days until expiry (0 the day it lapses, negative once expired). Always present — a real 0 is the most urgent operator signal.

id
string<uuid>
required

Certificate id.

notAfter
string<date-time>
required

Validity end (expiry).

sfnCertificateId
string
required

Exact 64-hex C11 identity used on the SFN wire.

subject
string
required

Certificate subject DN.

Example:

"CN=46026562, OU=SILOC"

custodyReference
string

Opaque reference to the private key in the FI's custody; the key itself is never stored here.

notBefore
string<date-time>

Validity start.

revokedAt
string<date-time>

Revocation time. Omitted while the certificate is active.

serialNumber
string

Certificate serial number.