Venafi

Venafi Certificates API

The Certificates API from Venafi — 8 operation(s) for certificates.

GitHub OpenAPI

Operations 8

GET /outagedetection/v1/certificates Retrieve all certificate data #
GET /outagedetection/v1/certificates/{id} Get a certificate's details #
GET /outagedetection/v1/certificates/{id}/contents Download a certificate #
POST /outagedetection/v1/certificates/validation Request validation for a set of certificates #
POST /outagedetection/v1/certificates/retirement Retire certificates #
POST /outagedetection/v1/certificates/recovery Recover a set of certificates #
POST /outagedetection/v1/certificates/deletion Delete a set of retired certificates #
POST /outagedetection/v1/certificatesearch Retrieve certificate data matching search criteria #

Documentation

📖
Documentation
https://developer.venafi.com/tlsprotectcloud/reference/tls-protect-overview
📖
Documentation
https://docs.venafi.com/Docs/currentSDK/TopNav/Content/SDK/WebSDK/cco-sdk-GettingStarted.php

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/openapi/venafi-certificates-api-openapi.yml

Other Resources

🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/asyncapi/venafi-certificate-manager-saas-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/venafi-certificates-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

venafi-certificates-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Certificate Manager - SaaS Certificates API
  version: '1.0'
servers:
- description: US Region
  url: https://api.venafi.cloud
- description: EU Region
  url: https://api.eu.venafi.cloud
- description: AU Region
  url: https://api.au.venafi.cloud
- description: UK Region
  url: https://api.uk.venafi.cloud
- description: SG Region
  url: https://api.sg.venafi.cloud
- description: CA Region
  url: https://api.ca.venafi.cloud
tags:
- name: Certificates
paths:
  /outagedetection/v1/certificates:
    get:
      description: 'This endpoint allows you to retrieve all your certificates according to a specified criteria. This API provides a quick way to gather certificate details in order to install the certificates where they are needed.


        Use the `subject` query parameter to limit the search based on the certificate subject common name.'
      operationId: certificates_getAll
      parameters:
      - in: query
        name: ownershipTree
        schema:
          default: false
          type: boolean
      - in: query
        name: excludeSupersededInstances
        schema:
          default: false
          type: boolean
      - description: Ability to enter regular expression to match specific criteria.
        in: query
        name: subject
        schema:
          type: string
      - description: Indicates the maximum integer number of certificates returned.
        in: query
        name: limit
        schema:
          default: 1000
          maximum: 10000
          minimum: 1
          type: number
      responses:
        '200':
          content:
            application/json:
              examples:
                Certificates details response:
                  description: Certificates details response
                  summary: Certificates details
                  value:
                    certificates:
                    - applicationIds:
                      - 47c9d920-da21-11ed-a63c-d508f08eeaa0
                      authorityKeyIdentifierHash: 27811CFCA803A90E617FA5D47441649608417DD4
                      certificateAuthorityAccountId: 2ed72220-da16-11ed-b080-e795c8859d29
                      certificateName: venafi.cloud
                      certificateRequestId: 3f675520-dfd8-11ed-82b4-074391f91f8b
                      certificateStatus: ACTIVE
                      companyId: 2d558b30-da16-11ed-8e4f-8339a1bc8d58
                      encryptionType: RSA
                      extendedKeyUsage:
                      - 1.3.6.1.5.5.7.3.1
                      - 1.3.6.1.5.5.7.3.2
                      fingerprint: F3CDE0F7539C331D9EF006092161EC8387320B4B
                      id: 3fb83440-dfd8-11ed-b8ab-4788d83ace9f
                      instances:
                      - applicationIds:
                        - 47c9d920-da21-11ed-a63c-d508f08eeaa0
                        certificateId: 3fb83440-dfd8-11ed-b8ab-4788d83ace9f
                        certificateInstanceId: 3fba3010-dfd8-11ed-b8ab-4788d83ace9f
                        certificateSource: USER_PROVIDED
                        deploymentStatus: SUPERSEDED
                        hostname: ''
                        ipAddress: 254.254.254.254
                        modificationDate: '2023-04-21T00:05:39.397+00:00'
                        port: 443
                      issuerC: US
                      issuerCN:
                      - Dedicated - Venafi Cloud Built-In Intermediate CA - G1
                      issuerCertificateIds:
                      - 73ff23b0-da21-11ed-befa-05892b4b966e
                      - 73e38560-da21-11ed-befa-05892b4b966e
                      issuerDN: cn=Dedicated - Venafi Cloud Built-In Intermediate CA - G1,ou=Built-in,o=Venafi, Inc.,c=US
                      issuerOU:
                      - Built-in
                      keyStrength: 4096
                      keyUsage:
                      - digitalSignature
                      - keyEncipherment
                      - keyAgreement
                      managedCertificateId: 3f3e7060-dfd8-11ed-8850-f18176fc5513
                      modificationDate: '2023-04-21T00:05:39.397+00:00'
                      ocspNoCheck: false
                      selfSigned: false
                      serialNumber: 173B8702B939C6E3FF702A1DE8386BF35A24A8B7
                      signatureAlgorithm: SHA256_WITH_RSA_ENCRYPTION
                      signatureHashAlgorithm: SHA256
                      subjectAlternativeNameDns:
                      - venafi.com
                      subjectAlternativeNamesByType:
                        dNSName:
                        - venafi.com
                      subjectC: US
                      subjectCN:
                      - venafi.cloud
                      subjectDN: cn=venafi.cloud,ou=dev,o=Venafi,c=US,st=Utah,l=Salt Lake City
                      subjectKeyIdentifierHash: C1EBF01EB166455AAFB6B8D7EFB5CDF78E7A930B
                      subjectL: Salt Lake City
                      subjectO: Venafi
                      subjectOU:
                      - dev
                      subjectST: Utah
                      totalActiveInstanceCount: 0
                      totalInstanceCount: 1
                      validityEnd: '2023-07-10T00:05:39.000+00:00'
                      validityStart: '2023-04-21T00:05:09.000+00:00'
                      versionType: CURRENT
                    - applicationIds:
                      - 47c9d920-da21-11ed-a63c-d508f08eeaa0
                      authorityKeyIdentifierHash: 27811CFCA803A90E617FA5D47441649608417DD4
                      certificateAuthorityAccountId: 2ed72220-da16-11ed-b080-e795c8859d29
                      certificateName: venafi.cloud
                      certificateRequestId: 567c4c70-dfd8-11ed-82b4-074391f91f8b
                      certificateStatus: ACTIVE
                      companyId: 2d558b30-da16-11ed-8e4f-8339a1bc8d58
                      encryptionType: RSA
                      extendedKeyUsage:
                      - 1.3.6.1.5.5.7.3.1
                      - 1.3.6.1.5.5.7.3.2
                      fingerprint: E8635EE689F6DB249CAA284FD8DDE7E09DEE6F00
                      id: 568a0810-dfd8-11ed-b8ab-4788d83ace9f
                      instances:
                      - applicationIds:
                        - 47c9d920-da21-11ed-a63c-d508f08eeaa0
                        certificateId: 568a0810-dfd8-11ed-b8ab-4788d83ace9f
                        certificateInstanceId: 568af270-dfd8-11ed-b8ab-4788d83ace9f
                        certificateSource: USER_PROVIDED
                        deploymentStatus: SUPERSEDED
                        hostname: ' '
                        instanceChainValidationStatus: []
                        ipAddress: 254.254.254.254
                        modificationDate: '2023-04-21T00:06:17.669+00:00'
                        port: 443
                      issuerC: US
                      issuerCN:
                      - Dedicated - Venafi Cloud Built-In Intermediate CA - G1
                      issuerCertificateIds:
                      - 73ff23b0-da21-11ed-befa-05892b4b966e
                      - 73e38560-da21-11ed-befa-05892b4b966e
                      issuerDN: cn=Dedicated - Venafi Cloud Built-In Intermediate CA - G1,ou=Built-in,o=Venafi, Inc.,c=US
                      issuerOU:
                      - Built-in
                      keyStrength: 4096
                      keyUsage:
                      - digitalSignature
                      - keyEncipherment
                      - keyAgreement
                      managedCertificateId: 5677dfa0-dfd8-11ed-8850-f18176fc5513
                      modificationDate: '2023-04-21T00:06:17.669+00:00'
                      ocspNoCheck: false
                      selfSigned: false
                      serialNumber: 6CC8CB1433B57D10353284EEC09E5D2D2153F4DC
                      signatureAlgorithm: SHA256_WITH_RSA_ENCRYPTION
                      signatureHashAlgorithm: SHA256
                      subjectAlternativeNameDns:
                      - venafi.cloud
                      subjectAlternativeNamesByType:
                        dNSName:
                        - venafi.cloud
                      subjectC: US
                      subjectCN:
                      - venafi.cloud
                      subjectDN: cn=venafi.cloud,ou=qa,o=Venafi,c=US,st=Utah,l=Salt Lake City
                      subjectKeyIdentifierHash: ACCCCB504BF86D1FD94F6D9DA2230A2B454EB5FC
                      subjectL: Salt Lake City
                      subjectO: Venafi
                      subjectOU:
                      - qa
                      subjectST: Utah
                      totalActiveInstanceCount: 0
                      totalInstanceCount: 1
                      validityEnd: '2023-07-10T00:06:17.000+00:00'
                      validityStart: '2023-04-21T00:05:47.000+00:00'
                      versionType: CURRENT
                    count: 2
              schema:
                $ref: '#/components/schemas/CertificateResponse'
            text/csv:
              examples:
                Certificates details response:
                  description: Certificates details response
                  summary: Certificates details
                  value:
                    certificates:
                    - applicationIds:
                      - 47c9d920-da21-11ed-a63c-d508f08eeaa0
                      authorityKeyIdentifierHash: 27811CFCA803A90E617FA5D47441649608417DD4
                      certificateAuthorityAccountId: 2ed72220-da16-11ed-b080-e795c8859d29
                      certificateName: venafi.cloud
                      certificateRequestId: 3f675520-dfd8-11ed-82b4-074391f91f8b
                      certificateStatus: ACTIVE
                      companyId: 2d558b30-da16-11ed-8e4f-8339a1bc8d58
                      encryptionType: RSA
                      extendedKeyUsage:
                      - 1.3.6.1.5.5.7.3.1
                      - 1.3.6.1.5.5.7.3.2
                      fingerprint: F3CDE0F7539C331D9EF006092161EC8387320B4B
                      id: 3fb83440-dfd8-11ed-b8ab-4788d83ace9f
                      instances:
                      - applicationIds:
                        - 47c9d920-da21-11ed-a63c-d508f08eeaa0
                        certificateId: 3fb83440-dfd8-11ed-b8ab-4788d83ace9f
                        certificateInstanceId: 3fba3010-dfd8-11ed-b8ab-4788d83ace9f
                        certificateSource: USER_PROVIDED
                        deploymentStatus: SUPERSEDED
                        hostname: ''
                        ipAddress: 254.254.254.254
                        modificationDate: '2023-04-21T00:05:39.397+00:00'
                        port: 443
                      issuerC: US
                      issuerCN:
                      - Dedicated - Venafi Cloud Built-In Intermediate CA - G1
                      issuerCertificateIds:
                      - 73ff23b0-da21-11ed-befa-05892b4b966e
                      - 73e38560-da21-11ed-befa-05892b4b966e
                      issuerDN: cn=Dedicated - Venafi Cloud Built-In Intermediate CA - G1,ou=Built-in,o=Venafi, Inc.,c=US
                      issuerOU:
                      - Built-in
                      keyStrength: 4096
                      keyUsage:
                      - digitalSignature
                      - keyEncipherment
                      - keyAgreement
                      managedCertificateId: 3f3e7060-dfd8-11ed-8850-f18176fc5513
                      modificationDate: '2023-04-21T00:05:39.397+00:00'
                      ocspNoCheck: false
                      selfSigned: false
                      serialNumber: 173B8702B939C6E3FF702A1DE8386BF35A24A8B7
                      signatureAlgorithm: SHA256_WITH_RSA_ENCRYPTION
                      signatureHashAlgorithm: SHA256
                      subjectAlternativeNameDns:
                      - venafi.com
                      subjectAlternativeNamesByType:
                        dNSName:
                        - venafi.com
                      subjectC: US
                      subjectCN:
                      - venafi.cloud
                      subjectDN: cn=venafi.cloud,ou=dev,o=Venafi,c=US,st=Utah,l=Salt Lake City
                      subjectKeyIdentifierHash: C1EBF01EB166455AAFB6B8D7EFB5CDF78E7A930B
                      subjectL: Salt Lake City
                      subjectO: Venafi
                      subjectOU:
                      - dev
                      subjectST: Utah
                      totalActiveInstanceCount: 0
                      totalInstanceCount: 1
                      validityEnd: '2023-07-10T00:05:39.000+00:00'
                      validityStart: '2023-04-21T00:05:09.000+00:00'
                      versionType: CURRENT
                    - applicationIds:
                      - 47c9d920-da21-11ed-a63c-d508f08eeaa0
                      authorityKeyIdentifierHash: 27811CFCA803A90E617FA5D47441649608417DD4
                      certificateAuthorityAccountId: 2ed72220-da16-11ed-b080-e795c8859d29
                      certificateName: venafi.cloud
                      certificateRequestId: 567c4c70-dfd8-11ed-82b4-074391f91f8b
                      certificateStatus: ACTIVE
                      companyId: 2d558b30-da16-11ed-8e4f-8339a1bc8d58
                      encryptionType: RSA
                      extendedKeyUsage:
                      - 1.3.6.1.5.5.7.3.1
                      - 1.3.6.1.5.5.7.3.2
                      fingerprint: E8635EE689F6DB249CAA284FD8DDE7E09DEE6F00
                      id: 568a0810-dfd8-11ed-b8ab-4788d83ace9f
                      instances:
                      - applicationIds:
                        - 47c9d920-da21-11ed-a63c-d508f08eeaa0
                        certificateId: 568a0810-dfd8-11ed-b8ab-4788d83ace9f
                        certificateInstanceId: 568af270-dfd8-11ed-b8ab-4788d83ace9f
                        certificateSource: USER_PROVIDED
                        deploymentStatus: SUPERSEDED
                        hostname: ' '
                        instanceChainValidationStatus: []
                        ipAddress: 254.254.254.254
                        modificationDate: '2023-04-21T00:06:17.669+00:00'
                        port: 443
                      issuerC: US
                      issuerCN:
                      - Dedicated - Venafi Cloud Built-In Intermediate CA - G1
                      issuerCertificateIds:
                      - 73ff23b0-da21-11ed-befa-05892b4b966e
                      - 73e38560-da21-11ed-befa-05892b4b966e
                      issuerDN: cn=Dedicated - Venafi Cloud Built-In Intermediate CA - G1,ou=Built-in,o=Venafi, Inc.,c=US
                      issuerOU:
                      - Built-in
                      keyStrength: 4096
                      keyUsage:
                      - digitalSignature
                      - keyEncipherment
                      - keyAgreement
                      managedCertificateId: 5677dfa0-dfd8-11ed-8850-f18176fc5513
                      modificationDate: '2023-04-21T00:06:17.669+00:00'
                      ocspNoCheck: false
                      selfSigned: false
                      serialNumber: 6CC8CB1433B57D10353284EEC09E5D2D2153F4DC
                      signatureAlgorithm: SHA256_WITH_RSA_ENCRYPTION
                      signatureHashAlgorithm: SHA256
                      subjectAlternativeNameDns:
                      - venafi.cloud
                      subjectAlternativeNamesByType:
                        dNSName:
                        - venafi.cloud
                      subjectC: US
                      subjectCN:
                      - venafi.cloud
                      subjectDN: cn=venafi.cloud,ou=qa,o=Venafi,c=US,st=Utah,l=Salt Lake City
                      subjectKeyIdentifierHash: ACCCCB504BF86D1FD94F6D9DA2230A2B454EB5FC
                      subjectL: Salt Lake City
                      subjectO: Venafi
                      subjectOU:
                      - qa
                      subjectST: Utah
                      totalActiveInstanceCount: 0
                      totalInstanceCount: 1
                      validityEnd: '2023-07-10T00:06:17.000+00:00'
                      validityStart: '2023-04-21T00:05:47.000+00:00'
                      versionType: CURRENT
                    count: 2
              schema:
                $ref: '#/components/schemas/CertificateResponse'
          description: Certificate(s) response.
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
            text/csv:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
          description: Request conditions failed.
        '412':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
            text/csv:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
          description: Request conditions failed.
      security:
      - tppl-api-key: []
      summary: Retrieve all certificate data
      tags:
      - Certificates
  /outagedetection/v1/certificates/{id}:
    get:
      description: Retrieves the details of the certificate that has the specified `id`.
      operationId: certificates_getById
      parameters:
      - description: Indicates whether response should include nested ownership data (e.g., `owningContainers`).
        in: query
        name: ownershipTree
        schema:
          default: false
          type: boolean
      - in: query
        name: excludeSupersededInstances
        schema:
          default: false
          type: boolean
      - description: UUID of a Certificate.
        in: path
        name: id
        required: true
        schema:
          format: uuid
          type: string
      responses:
        '200':
          content:
            application/json:
              examples:
                Certificate details response:
                  description: Certificate details response
                  summary: Certificate details
                  value:
                    applicationIds:
                    - 47c9d920-da21-11ed-a63c-d508f08eeaa0
                    authorityKeyIdentifierHash: 27811CFCA803A90E617FA5D47441649608417DD4
                    certificateAuthorityAccountId: 2ed72220-da16-11ed-b080-e795c8859d29
                    certificateName: venafi.cloud
                    certificateRequestId: 3f675520-dfd8-11ed-82b4-074391f91f8b
                    certificateStatus: ACTIVE
                    companyId: 2d558b30-da16-11ed-8e4f-8339a1bc8d58
                    encryptionType: RSA
                    extendedKeyUsage:
                    - 1.3.6.1.5.5.7.3.1
                    - 1.3.6.1.5.5.7.3.2
                    fingerprint: F3CDE0F7539C331D9EF006092161EC8387320B4B
                    id: 3fb83440-dfd8-11ed-b8ab-4788d83ace9f
                    instances:
                    - applicationIds:
                      - 47c9d920-da21-11ed-a63c-d508f08eeaa0
                      certificateId: 3fb83440-dfd8-11ed-b8ab-4788d83ace9f
                      certificateInstanceId: 3fba3010-dfd8-11ed-b8ab-4788d83ace9f
                      certificateSource: USER_PROVIDED
                      deploymentStatus: SUPERSEDED
                      hostname: ' '
                      instanceChainValidationStatus: []
                      ipAddress: 254.254.254.254
                      modificationDate: '2023-04-21T00:05:39.397+00:00'
                      port: 443
                      serviceIds: []
                    issuerC: US
                    issuerCN:
                    - Dedicated - Venafi Cloud Built-In Intermediate CA - G1
                    issuerCertificateIds:
                    - 73ff23b0-da21-11ed-befa-05892b4b966e
                    - 73e38560-da21-11ed-befa-05892b4b966e
                    issuerCertificates:
                    - authorityKeyIdentifierHash: EF4E4297B08CCB96978B672FCD52E166B3DC1DE3
                      certificateName: Dedicated - Venafi Cloud Built-In Intermediate CA - G1
                      certificateStatus: ACTIVE
                      companyId: 85d375a0-8038-11e5-bf87-317fe88bb23a
                      encryptionType: RSA
                      fingerprint: 5B8E151A0D23B0E72505C09F0563108ACCD64B24
                      id: 73ff23b0-da21-11ed-befa-05892b4b966e
                      instances:
                      - certificateId: 73ff23b0-da21-11ed-befa-05892b4b966e
                        certificateInstanceId: 7401e2d0-da21-11ed-befa-05892b4b966e
                        deploymentStatus: SUPERSEDED
                        hostname: ' '
                        instanceChainValidationStatus: []
                        ipAddress: 254.254.254.254
                        modificationDate: '2023-04-21T00:06:17.625+00:00'
                        port: 443
                      issuerC: US
                      issuerCN:
                      - Dedicated - Venafi Cloud Built-In CA
                      issuerCertificateIds:
                      - 73e38560-da21-11ed-befa-05892b4b966e
                      issuerDN: cn=Dedicated - Venafi Cloud Built-In CA,ou=Built-in,o=Venafi, Inc.,c=US
                      issuerOU:
                      - Built-in
                      keyStrength: 2048
                      keyUsage:
                      - keyCertSign
                      - cRLSign
                      managedCertificateId: 74463ed0-da21-11ed-a63c-d508f08eeaa0
                      modificationDate: '2023-04-21T00:06:17.625+00:00'
                      ocspNoCheck: false
                      selfSigned: false
                      serialNumber: 1E3DB051E62ACD3FCC15ED326299C692A8F7ECDB
                      signatureAlgorithm: SHA256_WITH_RSA_ENCRYPTION
                      signatureHashAlgorithm: SHA256
                      subjectC: US
                      subjectCN:
                      - Dedicated - Venafi Cloud Built-In Intermediate CA - G1
                      subjectDN: cn=Dedicated - Venafi Cloud Built-In Intermediate CA - G1,ou=Built-in,o=Venafi, Inc.,c=US
                      subjectKeyIdentifierHash: 27811CFCA803A90E617FA5D47441649608417DD4
                      subjectO: Venafi, Inc.
                      subjectOU:
                      - Built-in
                      totalActiveInstanceCount: 0
                      totalInstanceCount: 1
                      validityEnd: '2028-04-11T16:13:52.000+00:00'
                      validityStart: '2023-04-13T16:13:22.000+00:00'
                      versionType: CURRENT
                    - authorityKeyIdentifierHash: EF4E4297B08CCB96978B672FCD52E166B3DC1DE3
                      certificateName: Dedicated - Venafi Cloud Built-In CA
                      certificateStatus: ACTIVE
                      companyId: 85d375a0-8038-11e5-bf87-317fe88bb23a
                      encryptionType: RSA
                      fingerprint: AE38ABFB40DBB9309E1A6D9F08CF8C02C06F6D85
                      id: 73e38560-da21-11ed-befa-05892b4b966e
                      instances:
                      - certificateId: 73e38560-da21-11ed-befa-05892b4b966e
                        certificateInstanceId: 73ee0cb0-da21-11ed-befa-05892b4b966e
                        deploymentStatus: SUPERSEDED
                        hostname: ' '
                        instanceChainValidationStatus: []
                        ipAddress: 254.254.254.254
                        modificationDate: '2023-04-21T00:06:17.601+00:00'
                        port: 443
                      issuerC: US
                      issuerCN:
                      - Dedicated - Venafi Cloud Built-In CA
                      issuerCertificateIds: []
                      issuerDN: cn=Dedicated - Venafi Cloud Built-In CA,ou=Built-in,o=Venafi, Inc.,c=US
                      issuerOU:
                      - Built-in
                      keyStrength: 2048
                      keyUsage:
                      - keyCertSign
                      - cRLSign
                      managedCertificateId: 740f5050-da21-11ed-a63c-d508f08eeaa0
                      modificationDate: '2023-04-21T00:06:17.601+00:00'
                      ocspNoCheck: false
                      selfSigned: true
                      serialNumber: 080C053247AEFCA09FFF2FE6B4B5AEE6DDA65269
                      signatureAlgorithm: SHA256_WITH_RSA_ENCRYPTION
                      signatureHashAlgorithm: SHA256
                      subjectC: US
                      subjectCN:
                      - Dedicated - Venafi Cloud Built-In CA
                      subjectDN: cn=Dedicated - Venafi Cloud Built-In CA,ou=Built-in,o=Venafi, Inc.,c=US
                      subjectKeyIdentifierHash: EF4E4297B08CCB96978B672FCD52E166B3DC1DE3
                      subjectO: Venafi, Inc.
                      subjectOU:
                      - Built-in
                      totalActiveInstanceCount: 0
                      totalInstanceCount: 1
                      validityEnd: '2033-04-10T16:13:51.000+00:00'
                      validityStart: '2023-04-13T16:13:21.000+00:00'
                      versionType: CURRENT
                    issuerDN: cn=Dedicated - Venafi Cloud Built-In Intermediate CA - G1,ou=Built-in,o=Venafi, Inc.,c=US
                    issuerOU:
                    - Built-in
                    keyStrength: 4096
                    keyUsage:
                    - digitalSignature
                    - keyEncipherment
                    - keyAgreement
                    managedCertificateId: 3f3e7060-dfd8-11ed-8850-f18176fc5513
                    modificationDate: '2023-04-21T00:05:39.397+00:00'
                    ocspNoCheck: false
                    selfSigned: false
                    serialNumber: 173B8702B939C6E3FF702A1DE8386BF35A24A8B7
                    signatureAlgorithm: SHA256_WITH_RSA_ENCRYPTION
                    signatureHashAlgorithm: SHA256
                    subjectAlternativeNameDns:
                    - venafi.com
                    subjectAlternativeNamesByType:
                      dNSName:
                      - venafi.com
                    subjectC: US
                    subjectCN:
                    - venafi.cloud
                    subjectDN: cn=venafi.cloud,ou=dev,o=Venafi,c=US,st=Utah,l=Salt Lake City
                    subjectKeyIdentifierHash: C1EBF01EB166455AAFB6B8D7EFB5CDF78E7A930B
                    subjectL: Salt Lake City
                    subjectO: Venafi
                    subjectOU:
                    - dev
                    subjectST: Utah
                    totalActiveInstanceCount: 0
                    totalInstanceCount: 1
                    validityEnd: '2023-07-10T00:05:39.000+00:00'
                    validityStart: '2023-04-21T00:05:09.000+00:00'
                    versionType: CURRENT
              schema:
                $ref: '#/components/schemas/ExtendedCertificateInformation'
          description: Certificate was found; details in response body.
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
          description: Incomplete or malformed request.
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
          description: Certificate was not found.
        '412':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
          description: Incomplete or malformed request.
      security:
      - tppl-api-key: []
      summary: Get a certificate's details
      tags:
      - Certificates
  /outagedetection/v1/certificates/{id}/contents:
    get:
      description: Exports the certificate that has the specified `id` in PEM or DER format. Chain CA certificates are included for PEM format when `chainOrder` is EE_FIRST or ROOT_FIRST.
      operationId: certificates_getContentsById
      parameters:
      - description: Specify an 'accept' header parameter's value
        in: header
        name: Accept
        schema:
          enum:
          - text/plain
          - application/octet-stream
          type: string
      - description: UUID of a Certificate.
        in: path
        name: id
        required: true
        schema:
          format: uuid
          type: string
      - description: Format of certificate in response.
        in: query
        name: format
        schema:
          enum:
          - PEM
          - DER
          type: string
      - description: Order of certificates in response.
        in: query
        name: chainOrder
        schema:
          enum:
          - EE_ONLY
          - EE_FIRST
          - ROOT_FIRST
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                type: string
            application/octet-stream:
              schema:
                type: string
            text/plain:
              schema:
                type: string
          description: Raw certificate in response body
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
            application/octet-stream:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
            text/plain:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
          description: Incomplete or malformed request.
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
            application/octet-stream:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
            text/plain:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
          description: Certificate not found.
        '412':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
            application/octet-stream:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
            text/plain:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
          description: Incomplete or malformed request.
      security:
      - tppl-api-key: []
      summary: Download a certificate
      tags:
      - Certificates
  /outagedetection/v1/certificates/validation:
    post:
      description: Submits one or more certificates for TLS validation.
      operationId: certificates_validation
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CertificateValidationRequest'
      responses:
        '202':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CertificateValidationResponse'
          description: Certificates submitted for validation response.
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
          description: Incomplete or malformed request.
        '412':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse4'
          description: Incomplete or malformed request.
      security:
      - tppl-api-key: []
      summary: Request validation for a set of certificates
      tags:
      - Certificates
  /outagedetection/v1/certificates/retirement:
    post:
      description: This endpoint retires one or more certificates by using the **certificateIds** parameter to match a specified value.
      operationId: certificateretirement_retireCertificates
      requestBody:
        content:
          application/json:
            examples:
              Certificate retirement request:
                description: Certificate retirement request
                summary: Certificate retirement
                value:
                  addToBlocklist: false
                  certificateIds:
                  - 3fb83440-dfd8-11ed-b8ab-4788d83ace9f
            schema:
              $ref: '#/components/schemas/CertificateRetirementRequest'
      responses:
        '200':
          content:
            applicatio

# --- truncated at 32 KB (88 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/openapi/venafi-certificates-api-openapi.yml