Censys · Schema
RootStore
RootStore schema from Asset Graph API
SecurityInternet IntelligenceAttack Surface ManagementThreat Huntingcyber-threat-intelligenceOSINTInternet ScanningCertificatesAsset Discovery
Properties
| Name | Type | Description |
|---|---|---|
| chains | arraynull | A path of trusted signing certificates up to a root certificate present in a root store, represented as an ordered list of SHA-256 fingerprints. |
| ever_valid | boolean | Whether the certificate has ever been considered valid by the root store. |
| had_trusted_path | boolean | Whether there ever existed a trusted path of signing certificates from a certificate present in the root certificate store. |
| has_trusted_path | boolean | Whether there currently exists a trusted path of signing certificates from a certificate present in the root certificate store. |
| in_revocation_set | boolean | Whether the certificate is in the revocation set (e.g. OneCRL) associated with the root store. |
| is_valid | boolean | Whether the certificate is currently considered valid by the root store: a summary of the trust path, revoked, blocklisted/allowlisted, and expired fields. |
| parents | arraynull | The SHA-256 fingerprints of the certificate's immediate parents in its trust path(s). |
| type | string | The certificate's type. Options include root, intermediate, or leaf. |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://raw.githubusercontent.com/api-evangelist/censys/refs/heads/main/json-schema/asset-graph-rootstore-schema.json",
"title": "RootStore",
"description": "RootStore schema from Asset Graph API",
"type": "object",
"properties": {
"chains": {
"description": "A path of trusted signing certificates up to a root certificate present in a root store, represented as an ordered list of SHA-256 fingerprints.",
"items": {
"$ref": "#/components/schemas/RootStore_Chain"
},
"type": [
"array",
"null"
]
},
"ever_valid": {
"description": "Whether the certificate has ever been considered valid by the root store.",
"type": "boolean"
},
"had_trusted_path": {
"description": "Whether there ever existed a trusted path of signing certificates from a certificate present in the root certificate store.",
"type": "boolean"
},
"has_trusted_path": {
"description": "Whether there currently exists a trusted path of signing certificates from a certificate present in the root certificate store.",
"type": "boolean"
},
"in_revocation_set": {
"description": "Whether the certificate is in the revocation set (e.g. OneCRL) associated with the root store.",
"type": "boolean"
},
"is_valid": {
"description": "Whether the certificate is currently considered valid by the root store: a summary of the trust path, revoked, blocklisted/allowlisted, and expired fields.",
"type": "boolean"
},
"parents": {
"description": "The SHA-256 fingerprints of the certificate's immediate parents in its trust path(s).",
"format": "hex",
"items": {
"type": "string"
},
"type": [
"array",
"null"
]
},
"type": {
"description": "The certificate's type. Options include root, intermediate, or leaf.",
"enum": [
"",
"root",
"intermediate",
"leaf"
],
"type": "string"
}
},
"additionalProperties": false
}
Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/asset-graph-rootstore"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.