Censys · Schema

RootStore

RootStore schema from Asset Graph API

SecurityInternet IntelligenceAttack Surface ManagementThreat Huntingcyber-threat-intelligenceOSINTInternet ScanningCertificatesAsset Discovery

Properties

Name Type Description
chains arraynull A path of trusted signing certificates up to a root certificate present in a root store, represented as an ordered list of SHA-256 fingerprints.
ever_valid boolean Whether the certificate has ever been considered valid by the root store.
had_trusted_path boolean Whether there ever existed a trusted path of signing certificates from a certificate present in the root certificate store.
has_trusted_path boolean Whether there currently exists a trusted path of signing certificates from a certificate present in the root certificate store.
in_revocation_set boolean Whether the certificate is in the revocation set (e.g. OneCRL) associated with the root store.
is_valid boolean Whether the certificate is currently considered valid by the root store: a summary of the trust path, revoked, blocklisted/allowlisted, and expired fields.
parents arraynull The SHA-256 fingerprints of the certificate's immediate parents in its trust path(s).
type string The certificate's type. Options include root, intermediate, or leaf.
View JSON Schema on GitHub

JSON Schema

asset-graph-rootstore-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/censys/refs/heads/main/json-schema/asset-graph-rootstore-schema.json",
  "title": "RootStore",
  "description": "RootStore schema from Asset Graph API",
  "type": "object",
  "properties": {
    "chains": {
      "description": "A path of trusted signing certificates up to a root certificate present in a root store, represented as an ordered list of SHA-256 fingerprints.",
      "items": {
        "$ref": "#/components/schemas/RootStore_Chain"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "ever_valid": {
      "description": "Whether the certificate has ever been considered valid by the root store.",
      "type": "boolean"
    },
    "had_trusted_path": {
      "description": "Whether there ever existed a trusted path of signing certificates from a certificate present in the root certificate store.",
      "type": "boolean"
    },
    "has_trusted_path": {
      "description": "Whether there currently exists a trusted path of signing certificates from a certificate present in the root certificate store.",
      "type": "boolean"
    },
    "in_revocation_set": {
      "description": "Whether the certificate is in the revocation set (e.g. OneCRL) associated with the root store.",
      "type": "boolean"
    },
    "is_valid": {
      "description": "Whether the certificate is currently considered valid by the root store: a summary of the trust path, revoked, blocklisted/allowlisted, and expired fields.",
      "type": "boolean"
    },
    "parents": {
      "description": "The SHA-256 fingerprints of the certificate's immediate parents in its trust path(s).",
      "format": "hex",
      "items": {
        "type": "string"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "type": {
      "description": "The certificate's type. Options include root, intermediate, or leaf.",
      "enum": [
        "",
        "root",
        "intermediate",
        "leaf"
      ],
      "type": "string"
    }
  },
  "additionalProperties": false
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this
  • find_json_schemasBrowse and filter every JSON Schema in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/asset-graph-rootstore"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.