SSLCertificate

SSL certificate.

JSON representation 
{
  "cert_signature": {
    object (CertSignature)
  },
  "extension": {
    object (Extension)
  },
  "cert_extensions": {
    object
  },
  "first_seen_time": string,
  "issuer": {
    object (Subject)
  },
  "ec": {
    object (EC)
  },
  "serial_number": string,
  "signature_algorithm": string,
  "size": string,
  "subject": {
    object (Subject)
  },
  "thumbprint": string,
  "thumbprint_sha256": string,
  "validity": {
    object (Validity)
  },
  "version": string,
  "public_key": {
    object (PublicKey)
  }
}
Fields
cert_signature

object (CertSignature)

Certificate's signature and algorithm.
extension
(deprecated)

object (Extension)

(DEPRECATED) certificate's extension.
cert_extensions

object (Struct format)

Certificate's extensions.
first_seen_time

string (Timestamp format)

Date the certificate was first retrieved by VirusTotal.

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
issuer

object (Subject)

Certificate's issuer data.
ec

object (EC)

EC public key information.
serial_number

string

Certificate's serial number hexdump.
signature_algorithm

string

Algorithm used for the signature (for example, "sha1RSA").
size

string (int64 format)

Certificate content length.
subject

object (Subject)

Certificate's subject data.
thumbprint

string

Certificate's content SHA1 hash.
thumbprint_sha256

string

Certificate's content SHA256 hash.
validity

object (Validity)

Certificate's validity period.
version

string

Certificate version (typically "V1", "V2" or "V3").
public_key

object (PublicKey)

Public key information.

CertSignature

Certificate's signature and algorithm.

JSON representation 
{
  "signature": string,
  "signature_algorithm": string
}
Fields
signature

string

Signature.
signature_algorithm

string

Algorithm.

Extension

Certificate's extensions.

JSON representation 
{
  "ca": boolean,
  "subject_key_id": string,
  "authority_key_id": {
    object (AuthorityKeyId)
  },
  "key_usage": string,
  "ca_info_access": string,
  "crl_distribution_points": string,
  "extended_key_usage": string,
  "subject_alternative_name": string,
  "certificate_policies": string,
  "netscape_cert_comment": string,
  "cert_template_name_dc": string,
  "netscape_certificate": boolean,
  "pe_logotype": boolean,
  "old_authority_key_id": boolean
}
Fields
ca

boolean

Whether the subject acts as a certificate authority (CA) or not.
subject_key_id

string

Identifies the public key being certified.
authority_key_id

object (AuthorityKeyId)

Identifies the public key to be used to verify the signature on this certificate or CRL.
key_usage

string

The purpose for which the certified public key is used.
ca_info_access

string

Authority information access locations are URLs that are added to a certificate in its authority information access extension.
crl_distribution_points

string

CRL distribution points to which a certificate user should refer to ascertain if the certificate has been revoked.
extended_key_usage

string

One or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension field.
subject_alternative_name

string

Contains one or more alternative names, using any of a variety of name forms, for the entity that is bound by the CA to the certified public key.
certificate_policies

string

Different certificate policies will relate to different applications which may use the certified key.
netscape_cert_comment

string

Used to include free-form text comments inside certificates.
cert_template_name_dc

string

BMP data value "DomainController". See MS Q291010.
netscape_certificate

boolean

Identify whether the certificate subject is an SSL client, an SSL server, or a CA.
pe_logotype

boolean

Whether the certificate includes a logotype.
old_authority_key_id

boolean

Whether the certificate has an old authority key identifier extension.

AuthorityKeyId

Identifies the public key to be used to verify the signature on this certificate or CRL.

JSON representation 
{
  "keyid": string,
  "serial_number": string
}
Fields
keyid

string

Key hexdump.
serial_number

string

Serial number hexdump.

Subject

Subject data.

JSON representation 
{
  "country_name": string,
  "common_name": string,
  "locality": string,
  "organization": string,
  "organizational_unit": string,
  "state_or_province_name": string
}
Fields
country_name

string

C: Country name.
common_name

string

CN: CommonName.
locality

string

L: Locality.
organization

string

O: Organization.
organizational_unit

string

OU: OrganizationalUnit.
state_or_province_name

string

ST: StateOrProvinceName.

EC

EC public key information.

JSON representation 
{
  "oid": string,
  "pub": string
}
Fields
oid

string

Curve name.
pub

string

Public key hexdump.

Validity

Defines certificate's validity period.

JSON representation 
{
  "expiry_time": string,
  "issue_time": string
}
Fields
expiry_time

string (Timestamp format)

Expiry date.

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
issue_time

string (Timestamp format)

Issue date.

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".

PublicKey

Subject public key info.

JSON representation 
{
  "algorithm": string,
  "rsa": {
    object (RSA)
  }
}
Fields
algorithm

string

Any of "RSA", "DSA" or "EC". Indicates the algorithm used to generate the certificate.
rsa

object (RSA)

RSA public key information.

RSA

RSA public key information.

JSON representation 
{
  "key_size": string,
  "modulus": string,
  "exponent": string
}
Fields
key_size

string (int64 format)

Key size.
modulus

string

Key modulus hexdump.
exponent

string

Key exponent hexdump.