SSL certificate.
| JSON representation |
|---|
{ "certSignature" : { object ( |
| Fields | |
|---|---|
certSignature
|
Certificate's signature and algorithm. |
extension
|
(DEPRECATED) certificate's extension. |
certExtensions
|
Certificate's extensions. |
firstSeenTime
|
Date the certificate was first retrieved by VirusTotal. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
issuer
|
Certificate's issuer data. |
ec
|
EC public key information. |
serialNumber
|
Certificate's serial number hexdump. |
signatureAlgorithm
|
Algorithm used for the signature (for example, "sha1RSA"). |
size
|
Certificate content length. |
subject
|
Certificate's subject data. |
thumbprint
|
Certificate's content SHA1 hash. |
thumbprintSha256
|
Certificate's content SHA256 hash. |
validity
|
Certificate's validity period. |
version
|
Certificate version (typically "V1", "V2" or "V3"). |
publicKey
|
Public key information. |
CertSignature
Certificate's signature and algorithm.
| JSON representation |
|---|
{ "signature" : string , "signatureAlgorithm" : string } |
| Fields | |
|---|---|
signature
|
Signature. |
signatureAlgorithm
|
Algorithm. |
Extension
Certificate's extensions.
| JSON representation |
|---|
{
"ca"
:
boolean
,
"subjectKeyId"
:
string
,
"authorityKeyId"
:
{
object (
|
| Fields | |
|---|---|
ca
|
Whether the subject acts as a certificate authority (CA) or not. |
subjectKeyId
|
Identifies the public key being certified. |
authorityKeyId
|
Identifies the public key to be used to verify the signature on this certificate or CRL. |
keyUsage
|
The purpose for which the certified public key is used. |
caInfoAccess
|
Authority information access locations are URLs that are added to a certificate in its authority information access extension. |
crlDistributionPoints
|
CRL distribution points to which a certificate user should refer to ascertain if the certificate has been revoked. |
extendedKeyUsage
|
One or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension field. |
subjectAlternativeName
|
Contains one or more alternative names, using any of a variety of name forms, for the entity that is bound by the CA to the certified public key. |
certificatePolicies
|
Different certificate policies will relate to different applications which may use the certified key. |
netscapeCertComment
|
Used to include free-form text comments inside certificates. |
certTemplateNameDc
|
BMP data value "DomainController". See MS Q291010. |
netscapeCertificate
|
Identify whether the certificate subject is an SSL client, an SSL server, or a CA. |
peLogotype
|
Whether the certificate includes a logotype. |
oldAuthorityKeyId
|
Whether the certificate has an old authority key identifier extension. |
AuthorityKeyId
Identifies the public key to be used to verify the signature on this certificate or CRL.
| JSON representation |
|---|
{ "keyid" : string , "serialNumber" : string } |
| Fields | |
|---|---|
keyid
|
Key hexdump. |
serialNumber
|
Serial number hexdump. |
Subject
Subject data.
| JSON representation |
|---|
{ "countryName" : string , "commonName" : string , "locality" : string , "organization" : string , "organizationalUnit" : string , "stateOrProvinceName" : string } |
| Fields | |
|---|---|
countryName
|
C: Country name. |
commonName
|
CN: CommonName. |
locality
|
L: Locality. |
organization
|
O: Organization. |
organizationalUnit
|
OU: OrganizationalUnit. |
stateOrProvinceName
|
ST: StateOrProvinceName. |
EC
EC public key information.
| JSON representation |
|---|
{ "oid" : string , "pub" : string } |
| Fields | |
|---|---|
oid
|
Curve name. |
pub
|
Public key hexdump. |
Validity
Defines certificate's validity period.
| JSON representation |
|---|
{ "expiryTime" : string , "issueTime" : string } |
| Fields | |
|---|---|
expiryTime
|
Expiry date. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
issueTime
|
Issue date. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
PublicKey
Subject public key info.
| JSON representation |
|---|
{
"algorithm"
:
string
,
"rsa"
:
{
object (
|
| Fields | |
|---|---|
algorithm
|
Any of "RSA", "DSA" or "EC". Indicates the algorithm used to generate the certificate. |
rsa
|
RSA public key information. |
RSA
RSA public key information.
| JSON representation |
|---|
{ "keySize" : string , "modulus" : string , "exponent" : string } |
| Fields | |
|---|---|
keySize
|
Key size. |
modulus
|
Key modulus hexdump. |
exponent
|
Key exponent hexdump. |

