CheckCertificate

The CheckCertificate command is used to check the certificate request for validation and information details. Please note, the CA does not check the WHOIS for email addresses when ordering/renewing the certificate. To work around this, call the CheckCertificate API command (with the optional parameters), and this will cache it for 24 hours, then place the order with this timeframe. The email address has to be one that returns from the response.

Possible Gateways

The command CheckCertificate is available via the following gateways:

Required Parameters

The following parameters are standard parameters for this command.

Command

COMMAND = checkCertificate
CSR#    = [TEXT]
CRT#    = [TEXT]

Response

code                      = [INT]
description               = [TEXT]
queuetime                 = [INT]
runtime                   = [INT]
property[CSR_PUBLIC_KEY_ALGORITHM][0]        = [TEXT]
property[CSR_SIGNATURE_ALGORITHM][0]         = [TEXT]
property[CSR_SIZE][0]                        = [INT]
property[CSR_SUBJECT][0]                     = [TEXT]
property[CRT_PUBLIC_KEY_ALGORITHM][0]        = [TEXT]
property[CRT_SIGNATURE_ALGORITHM][0]         = [TEXT]
property[CRT_VALIDITY_NOT_BEFORE][0]         = [DATE]
property[CRT_VALIDITY_NOT_AFTER][0]          = [DATE]
property[CRT_SIZE][0]                        = [INT]
property[CRT_VERSION][0]                     = [TEXT]
property[CRT_SERIAL][0]                      = [TEXT]
property[CRT_SUBJECT][0]                     = [TEXT]
property[CRT_ISSUER][0]                      = [TEXT]
property[CSR_SAN#][0]                        = [TEXT]
property[CRT_SAN#][0]                        = [TEXT]
property[CSR_KEY_USAGE#][0]                  = [TEXT]
property[CRT_KEY_USAGE#][0]                  = [TEXT]
property[CRT_EXTENDED_KEY_USAGE#][0]         = [TEXT]
property[CSR_EMAILADDRESS][0]                = [TEXT]
property[CSR_LOCATION][0]                    = [TEXT]
property[CRT_SUBJECT_EMAILADDRESS][0]        = [TEXT]
property[CRT_SUBJECT_LOCATION][0]            = [TEXT]
property[CRT_ISSUER_EMAILADDRESS][0]         = [TEXT]
property[CRT_ISSUER_LOCATION][0]             = [TEXT]
property[CSR_COMMONNAME][0]                  = [TEXT]
property[CRT_SUBJECT_COMMONNAME][0]          = [TEXT]
property[CRT_ISSUER_COMMONNAME][0]           = [TEXT]
property[CSR_STATE][0]                       = [TEXT]
property[CSR_COUNTRY][0]                     = [TEXT]
property[CRT_SUBJECT_STATE][0]               = [TEXT]
property[CRT_SUBJECT_COUNTRY][0]             = [TEXT]
property[CRT_ISSUER_STATE][0]                = [TEXT]
property[CRT_ISSUER_COUNTRY][0]              = [TEXT]
property[CSR_ORGANIZATION][0]                = [TEXT]
property[CSR_ORGANIZATIONAL_UNIT][0]         = [TEXT]
property[CRT_SUBJECT_ORGANIZATION][0]        = [TEXT]
property[CRT_SUBJECT_ORGANIZATIONAL_UNIT][0] = [TEXT]
property[CRT_ISSUER_ORGANIZATION][0]         = [TEXT]
property[CRT_ISSUER_ORGANIZATIONAL_UNIT][0]  = [TEXT]
EOF

Attributes

CSR#	A base64 encoded certificate request
CRT#	A base64 encoded X509 certificate
CSR_PUBLIC_KEY_ALGORITHM	Public key algorithm used in the CSR
CSR_SIGNATURE_ALGORITHM	Signature algorithm used in the CSR
CSR_SIZE	Size of the CSR
CSR_SUBJECT	Subject encoded in the CSR
CRT_PUBLIC_KEY_ALGORITHM	Public key algorithm used for the CRT
CRT_SIGNATURE_ALGORITHM	Signature algorithm used for the CRT
CRT_VALIDITY_NOT_BEFORE	CRT only valid after this date
CRT_VALIDITY_NOT_AFTER	CRT only valid before this date
CRT_SIZE	Size of the CRT
CRT_VERSION	Version encoded in the CRT
CRT_SERIAL	Serial of the CRT
CRT_SUBJECT	Subject encoded in the CRT
CRT_ISSUER	Issuer of the CRT
CSR_SAN#	Domains encoded in the CSR
CRT_SAN#	Domains encoded in the CRT
CSR_KEY_USAGE#	Allowed usage of the CSR
CRT_KEY_USAGE#	Allowed usage of the CRT
CRT_EXTENDED_KEY_USAGE#	Details of the allowed usage of the CRT
CSR_EMAILADDRESS	Email given in the CSR
CSR_LOCATION	City given in the CSR
CRT_SUBJECT_EMAILADDRESS	Email given in the CRT
CRT_SUBJECT_LOCATION	City given in the CRT
CRT_ISSUER_EMAILADDRESS	Email given in the CRT
CRT_ISSUER_LOCATION	City given in the CRT
CSR_COMMONNAME	Common name given in the CSR
CRT_SUBJECT_COMMONNAME	Common name given in the CRT
CRT_ISSUER_COMMONNAME	Common name given in the CRT
CSR_STATE	State given in the CSR
CSR_COUNTRY	Country given in the CSR
CRT_SUBJECT_STATE	State given in the CRT
CRT_SUBJECT_COUNTRY	Country given in the CRT
CRT_ISSUER_STATE	State given in the CRT
CRT_ISSUER_COUNTRY	Country given in the CRT
CSR_ORGANIZATION	Organization given in the CSR
CSR_ORGANIZATIONAL_UNIT	Unit of the organization given in the CSR
CRT_SUBJECT_ORGANIZATION	Organization given in the CRT
CRT_SUBJECT_ORGANIZATIONAL_UNIT	Unit of the organization given in the CRT
CRT_ISSUER_ORGANIZATION	Organization given in the CRT
CRT_ISSUER_ORGANIZATIONAL_UNIT	Unit of the organization given in the CRT

Optional

The following parameters are optional for this command.

Command

COMMAND = checkCertificate
DOMAIN  = [TEXT]
CLASS   = [TEXT]

Response

code                      = [INT]
description               = [TEXT]
queuetime                 = [INT]
runtime                   = [INT]
property[approveremail][0]= [TEXT]
property[approvertype][0] = [TEXT]
property[column][0]       = [TEXT]
property[column][1]       = [TEXT]
EOF

Attributes

approveremail	Email where the approval-link should be sent to
approvertype	Owner (base) of the domain