SSL certificate.
JSON representation |
---|
{ "certSignature": { object ( |
Fields | |
---|---|
certSignature |
Certificate's signature and algorithm. |
extension |
(DEPRECATED) certificate's extension. |
certExtensions |
Certificate's extensions. |
firstSeenTime |
Date the certificate was first retrieved by VirusTotal. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
issuer |
Certificate's issuer data. |
ec |
EC public key information. |
serialNumber |
Certificate's serial number hexdump. |
signatureAlgorithm |
Algorithm used for the signature (for example, "sha1RSA"). |
size |
Certificate content length. |
subject |
Certificate's subject data. |
thumbprint |
Certificate's content SHA1 hash. |
thumbprintSha256 |
Certificate's content SHA256 hash. |
validity |
Certificate's validity period. |
version |
Certificate version (typically "V1", "V2" or "V3"). |
publicKey |
Public key information. |
CertSignature
Certificate's signature and algorithm.
JSON representation |
---|
{ "signature": string, "signatureAlgorithm": string } |
Fields | |
---|---|
signature |
Signature. |
signatureAlgorithm |
Algorithm. |
Extension
Certificate's extensions.
JSON representation |
---|
{
"ca": boolean,
"subjectKeyId": string,
"authorityKeyId": {
object ( |
Fields | |
---|---|
ca |
Whether the subject acts as a certificate authority (CA) or not. |
subjectKeyId |
Identifies the public key being certified. |
authorityKeyId |
Identifies the public key to be used to verify the signature on this certificate or CRL. |
keyUsage |
The purpose for which the certified public key is used. |
caInfoAccess |
Authority information access locations are URLs that are added to a certificate in its authority information access extension. |
crlDistributionPoints |
CRL distribution points to which a certificate user should refer to ascertain if the certificate has been revoked. |
extendedKeyUsage |
One or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension field. |
subjectAlternativeName |
Contains one or more alternative names, using any of a variety of name forms, for the entity that is bound by the CA to the certified public key. |
certificatePolicies |
Different certificate policies will relate to different applications which may use the certified key. |
netscapeCertComment |
Used to include free-form text comments inside certificates. |
certTemplateNameDc |
BMP data value "DomainController". See MS Q291010. |
netscapeCertificate |
Identify whether the certificate subject is an SSL client, an SSL server, or a CA. |
peLogotype |
Whether the certificate includes a logotype. |
oldAuthorityKeyId |
Whether the certificate has an old authority key identifier extension. |
AuthorityKeyId
Identifies the public key to be used to verify the signature on this certificate or CRL.
JSON representation |
---|
{ "keyid": string, "serialNumber": string } |
Fields | |
---|---|
keyid |
Key hexdump. |
serialNumber |
Serial number hexdump. |
Subject
Subject data.
JSON representation |
---|
{ "countryName": string, "commonName": string, "locality": string, "organization": string, "organizationalUnit": string, "stateOrProvinceName": string } |
Fields | |
---|---|
countryName |
C: Country name. |
commonName |
CN: CommonName. |
locality |
L: Locality. |
organization |
O: Organization. |
organizationalUnit |
OU: OrganizationalUnit. |
stateOrProvinceName |
ST: StateOrProvinceName. |
EC
EC public key information.
JSON representation |
---|
{ "oid": string, "pub": string } |
Fields | |
---|---|
oid |
Curve name. |
pub |
Public key hexdump. |
Validity
Defines certificate's validity period.
JSON representation |
---|
{ "expiryTime": string, "issueTime": string } |
Fields | |
---|---|
expiryTime |
Expiry date. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
issueTime |
Issue date. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
PublicKey
Subject public key info.
JSON representation |
---|
{
"algorithm": string,
"rsa": {
object ( |
Fields | |
---|---|
algorithm |
Any of "RSA", "DSA" or "EC". Indicates the algorithm used to generate the certificate. |
rsa |
RSA public key information. |
RSA
RSA public key information.
JSON representation |
---|
{ "keySize": string, "modulus": string, "exponent": string } |
Fields | |
---|---|
keySize |
Key size. |
modulus |
Key modulus hexdump. |
exponent |
Key exponent hexdump. |