> ## Documentation Index > Fetch the complete documentation index at: https://infisical.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Retrieve > Get certificate ## OpenAPI ````yaml GET /api/v1/cert-manager/certificates/{id} openapi: 3.0.3 info: title: Infisical API description: List of all available APIs that can be consumed version: 0.0.1 servers: - url: https://us.infisical.com description: Production server (US) - url: https://eu.infisical.com description: Production server (EU) - url: http://localhost:8080 description: Local server security: [] paths: /api/v1/cert-manager/certificates/{id}: get: tags: - PKI Certificates description: Get certificate operationId: getCertificate parameters: - schema: anyOf: - type: boolean - type: string default: true in: query name: includeDeleted required: false description: >- Return the certificate even if it was deleted. Without it, a deleted certificate returns 404. - schema: type: string format: uuid in: path name: id required: true description: The ID of the certificate to get. responses: '200': description: Default Response content: application/json: schema: type: object properties: certificate: type: object properties: id: type: string format: uuid createdAt: type: string format: date-time updatedAt: type: string format: date-time caId: type: string format: uuid nullable: true status: type: string serialNumber: type: string friendlyName: type: string commonName: type: string notBefore: type: string format: date-time notAfter: type: string format: date-time revokedAt: type: string format: date-time nullable: true revocationReason: type: number nullable: true altNames: type: string nullable: true caCertId: type: string format: uuid nullable: true certificateTemplateId: type: string format: uuid nullable: true keyUsages: type: array items: type: string nullable: true extendedKeyUsages: type: array items: type: string nullable: true pkiSubscriberId: type: string format: uuid nullable: true profileId: type: string format: uuid nullable: true renewBeforeDays: type: number nullable: true renewedFromCertificateId: type: string format: uuid nullable: true renewedByCertificateId: type: string format: uuid nullable: true renewalError: type: string nullable: true keyAlgorithm: type: string nullable: true signatureAlgorithm: type: string nullable: true subjectOrganization: type: string nullable: true subjectOrganizationalUnit: type: string nullable: true subjectCountry: type: string nullable: true subjectState: type: string nullable: true subjectLocality: type: string nullable: true fingerprintSha256: type: string nullable: true fingerprintSha1: type: string nullable: true isCA: type: boolean nullable: true pathLength: type: number nullable: true source: type: string nullable: true discoveryMetadata: nullable: true externalMetadata: anyOf: - type: object properties: type: type: string enum: - aws-acm-public-ca arn: type: string region: type: string enum: - us-east-1 - us-east-2 - us-west-1 - us-west-2 - us-gov-east-1 - us-gov-west-1 - af-south-1 - ap-east-1 - ap-south-1 - ap-south-2 - ap-northeast-1 - ap-northeast-2 - ap-northeast-3 - ap-southeast-1 - ap-southeast-2 - ap-southeast-3 - ap-southeast-4 - ca-central-1 - eu-central-1 - eu-central-2 - eu-west-1 - eu-west-2 - eu-west-3 - eu-south-1 - eu-south-2 - eu-north-1 - me-south-1 - me-central-1 - sa-east-1 validationMethod: type: string enum: - DNS required: - type - arn - region - validationMethod additionalProperties: false - type: object properties: type: type: string enum: - digicert orderId: type: integer exclusiveMinimum: true minimum: -9007199254740991 maximum: 9007199254740991 certificateId: type: integer exclusiveMinimum: true minimum: -9007199254740991 maximum: 9007199254740991 required: - type - orderId additionalProperties: false - type: object properties: type: type: string enum: - godaddy certificateId: type: string minLength: 1 required: - type - certificateId additionalProperties: false nullable: true description: >- Identifies this certificate at the provider that issued it, for certificates issued by or linked to an external certificate authority. Null for everything else. applicationId: type: string format: uuid nullable: true keySource: type: string default: infisical hsmConnectorId: type: string format: uuid nullable: true hsmKeyLabel: type: string nullable: true hsmPublicKeySpki: nullable: true subjectDomainComponents: type: string nullable: true orderId: type: string format: uuid default: 00000000-0000-0000-0000-000000000000 customExtensions: nullable: true hsmKeyId: type: string nullable: true deletedAt: type: string format: date-time nullable: true description: >- When this certificate was deleted, or null if it has not been. A deleted certificate keeps its record, metadata and renewal history, but its certificate and private key are no longer available. deletedByActorType: type: string enum: - platform - kmipClient - user - service - identity - scimClient - acmeProfile - acmeAccount - estAccount - scepAccount - unknownUser - gateway - relay - kmipServer - agentVaultProxy nullable: true description: >- The type of actor that deleted this certificate: 'user' or 'identity'. deletedByActorId: type: string format: uuid nullable: true description: >- The ID of the user or machine identity that deleted this certificate. subject: type: object properties: commonName: type: string organization: type: string organizationalUnit: type: string country: type: string state: type: string locality: type: string domainComponents: type: array items: type: string additionalProperties: false fingerprints: type: object properties: sha256: type: string sha1: type: string required: - sha256 additionalProperties: false basicConstraints: type: object properties: isCA: type: boolean pathLength: type: number required: - isCA additionalProperties: false caName: type: string nullable: true caType: type: string enum: - internal - external nullable: true profileName: type: string nullable: true applicationName: type: string nullable: true hasPrivateKey: type: boolean description: >- Whether Infisical holds the private key for this certificate. latestRenewalCertificateId: type: string format: uuid nullable: true description: >- The ID of the newest certificate that has replaced this one through renewal, or null if no newer replacement is available. Revoked and deleted certificates are never named, so this is null when this certificate has never been renewed and also when every renewal of it has since been revoked or deleted. Use this to follow renewals without walking the chain one certificate at a time. deletedByActorName: type: string nullable: true description: >- The name of the user or machine identity that deleted this certificate, if it still exists. metadata: type: array items: type: object properties: key: type: string value: type: string required: - key - value additionalProperties: false required: - id - createdAt - updatedAt - status - serialNumber - friendlyName - commonName - notBefore - notAfter - hasPrivateKey additionalProperties: false required: - certificate additionalProperties: false '400': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 400 message: type: string error: type: string details: {} required: - reqId - statusCode - message - error additionalProperties: false '401': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 401 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false '403': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 403 message: type: string details: {} error: type: string required: - reqId - statusCode - message - error additionalProperties: false '404': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 404 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false '422': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 422 message: {} error: type: string required: - reqId - statusCode - error additionalProperties: false '500': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 500 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.