X-Road (NIIS) · Schema
CertificateDetails
certificate details for any kind of certificate (TLS, auth, sign)
CompanyGovernmentInteroperabilityData ExchangeOpen SourceDigital Public InfrastructureSecurity
Properties
| Name | Type | Description |
|---|---|---|
| issuer_distinguished_name | string | certificate issuer distinguished name |
| issuer_common_name | string | certificate issuer common name |
| subject_distinguished_name | string | certificate subject distinguished name |
| subject_common_name | string | certificate subject common name |
| not_before | string | certificate validity not before |
| not_after | string | certificate validity not after |
| serial | string | serial number |
| version | integer | version |
| signature_algorithm | string | certificate signature algorithm |
| signature | string | hex encoded certificate signature |
| public_key_algorithm | string | certificate public key algorithm |
| rsa_public_key_modulus | string | hex encoded RSA public key modulus (if RSA key) |
| rsa_public_key_exponent | integer | RSA public key exponent (if RSA key) as an integer |
| ec_public_parameters | string | EC public key curve (if EC key) |
| ec_public_key_point | string | hex encoded EC public key point (if EC key) |
| hash | string | certificate SHA-256 hash |
| key_usages | array | certificate key usage array |
| subject_alternative_names | string | certificate subject alternative names |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://artifacts.apis.io/x-road-global/json-schema/x-road-global-certificate-details-schema.json",
"title": "CertificateDetails",
"description": "certificate details for any kind of certificate (TLS, auth, sign)",
"x-generated": "2026-11-10",
"x-method": "derived",
"x-generator": "derive-json-schema.py",
"x-source": "openapi/x-road-global-security-server-admin-openapi.yml#/components/schemas/CertificateDetails",
"type": "object",
"required": [
"issuer_distinguished_name",
"issuer_common_name",
"subject_distinguished_name",
"subject_common_name",
"not_before",
"not_after",
"serial",
"version",
"signature_algorithm",
"signature",
"public_key_algorithm",
"rsa_public_key_modulus",
"rsa_public_key_exponent",
"hash",
"key_usages",
"subject_alternative_names"
],
"properties": {
"issuer_distinguished_name": {
"type": "string",
"format": "text",
"description": "certificate issuer distinguished name",
"minLength": 1,
"maxLength": 255
},
"issuer_common_name": {
"type": "string",
"format": "text",
"description": "certificate issuer common name",
"minLength": 1,
"maxLength": 255
},
"subject_distinguished_name": {
"type": "string",
"format": "text",
"description": "certificate subject distinguished name",
"minLength": 1,
"maxLength": 255
},
"subject_common_name": {
"type": "string",
"format": "text",
"description": "certificate subject common name",
"minLength": 1,
"maxLength": 255
},
"not_before": {
"type": "string",
"format": "date-time",
"description": "certificate validity not before",
"minLength": 24,
"maxLength": 24
},
"not_after": {
"type": "string",
"format": "date-time",
"description": "certificate validity not after",
"minLength": 24,
"maxLength": 24
},
"serial": {
"type": "string",
"format": "text",
"description": "serial number",
"minLength": 1,
"maxLength": 255
},
"version": {
"type": "integer",
"format": "int32",
"description": "version"
},
"signature_algorithm": {
"type": "string",
"format": "sha-256",
"description": "certificate signature algorithm",
"minLength": 1,
"maxLength": 255
},
"signature": {
"type": "string",
"format": "text",
"description": "hex encoded certificate signature",
"minLength": 1,
"maxLength": 255
},
"public_key_algorithm": {
"type": "string",
"format": "sha-256",
"description": "certificate public key algorithm",
"minLength": 1,
"maxLength": 255
},
"rsa_public_key_modulus": {
"type": "string",
"format": "hex",
"description": "hex encoded RSA public key modulus (if RSA key)",
"minLength": 1,
"maxLength": 1000
},
"rsa_public_key_exponent": {
"type": "integer",
"format": "int32",
"description": "RSA public key exponent (if RSA key) as an integer"
},
"ec_public_parameters": {
"description": "EC public key curve (if EC key)",
"format": "text",
"maxLength": 255,
"minLength": 1,
"type": "string"
},
"ec_public_key_point": {
"description": "hex encoded EC public key point (if EC key)",
"format": "hex",
"maxLength": 1000,
"minLength": 1,
"type": "string"
},
"hash": {
"type": "string",
"format": "text",
"description": "certificate SHA-256 hash",
"minLength": 1,
"maxLength": 64
},
"key_usages": {
"type": "array",
"description": "certificate key usage array",
"uniqueItems": true,
"items": {
"$ref": "#/$defs/KeyUsage"
}
},
"subject_alternative_names": {
"type": "string",
"format": "text",
"description": "certificate subject alternative names",
"minLength": 1,
"maxLength": 1000
}
},
"$defs": {
"KeyUsage": {
"type": "string",
"description": "certificate key usage",
"enum": [
"DIGITAL_SIGNATURE",
"NON_REPUDIATION",
"KEY_ENCIPHERMENT",
"DATA_ENCIPHERMENT",
"KEY_AGREEMENT",
"KEY_CERT_SIGN",
"CRL_SIGN",
"ENCIPHER_ONLY",
"DECIPHER_ONLY"
]
}
}
}
Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/x-road-global-certificate-details"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.