Skip to content
Cloudflare API
Start here
API Reference
Radar

CT

Get certificate distribution by dimension
client.radar.ct.summary("CA" | "CA_OWNER" | "DURATION" | 11 moredimension, CTSummaryParams { ca, caOwner, dateEnd, 19 more } query?, RequestOptionsoptions?): CTSummaryResponse { meta, summary_0 }
GET/radar/ct/summary/{dimension}
Get certificates time series
client.radar.ct.timeseries(CTTimeseriesParams { aggInterval, ca, caOwner, 18 more } query?, RequestOptionsoptions?): CTTimeseriesResponse { meta }
GET/radar/ct/timeseries
Get time series of certificate distribution by dimension
client.radar.ct.timeseriesGroups("CA" | "CA_OWNER" | "DURATION" | 11 moredimension, CTTimeseriesGroupsParams { aggInterval, ca, caOwner, 20 more } query?, RequestOptionsoptions?): CTTimeseriesGroupsResponse { meta, serie_0 }
GET/radar/ct/timeseries_groups/{dimension}
ModelsExpand Collapse
CTSummaryResponse { meta, summary_0 }
meta: Meta { confidenceInfo, dateRange, lastUpdated, 2 more }

Metadata for the results.

confidenceInfo: ConfidenceInfo { annotations, level }
annotations: Array<Annotation>
dataSource: "ALL" | "AI_BOTS" | "AI_GATEWAY" | 22 more

Data source for annotations.

One of the following:
"ALL"
"AI_BOTS"
"AI_GATEWAY"
"BGP"
"BOTS"
"CONNECTION_ANOMALY"
"CT"
"DNS"
"DNS_MAGNITUDE"
"DNS_AS112"
"DOS"
"EMAIL_ROUTING"
"EMAIL_SECURITY"
"FW"
"FW_PG"
"HTTP"
"HTTP_CONTROL"
"HTTP_CRAWLER_REFERER"
"HTTP_ORIGINS"
"IQI"
"LEAKED_CREDENTIALS"
"NET"
"ROBOTS_TXT"
"SPEED"
"WORKERS_AI"
description: string
endDate: string
formatdate-time
eventType: "EVENT" | "GENERAL" | "OUTAGE" | 3 more

Event type for annotations.

One of the following:
"EVENT"
"GENERAL"
"OUTAGE"
"PARTIAL_PROJECTION"
"PIPELINE"
"TRAFFIC_ANOMALY"
isInstantaneous: boolean

Whether event is a single point in time or a time range.

linkedUrl: string
formaturi
startDate: string
formatdate-time
level: number

Provides an indication of how much confidence Cloudflare has in the data.

dateRange: Array<DateRange>
endTime: string

Adjusted end of date range.

formatdate-time
startTime: string

Adjusted start of date range.

formatdate-time
lastUpdated: string

Timestamp of the last dataset update.

formatdate-time
normalization: "PERCENTAGE" | "MIN0_MAX" | "MIN_MAX" | 5 more

Normalization method applied to the results. Refer to Normalization methods.

One of the following:
"PERCENTAGE"
"MIN0_MAX"
"MIN_MAX"
"RAW_VALUES"
"PERCENTAGE_CHANGE"
"ROLLING_AVERAGE"
"OVERLAPPED_PERCENTAGE"
"RATIO"
units: Array<Unit>

Measurement units for the results.

name: string
value: string
summary_0: Record<string, string> | UnionMember1 { rfc6962, static } | UnionMember2 { gt_121d, gt_16d_lte_31d, gt_31d_lte_91d, 3 more } | 5 more
One of the following:
Record<string, string>
UnionMember1 { rfc6962, static }
rfc6962: string
static: string
UnionMember2 { gt_121d, gt_16d_lte_31d, gt_31d_lte_91d, 3 more }
gt_121d: string
gt_16d_lte_31d: string
gt_31d_lte_91d: string
gt_3d_lte_16d: string
gt_91d_lte_121d: string
lte_3d: string
UnionMember3 { CERTIFICATE, PRECERTIFICATE }
CERTIFICATE: string
PRECERTIFICATE: string
UnionMember4 { EXPIRED, VALID }
EXPIRED: string
VALID: string
UnionMember5 { NEGATIVE, POSITIVE }
NEGATIVE: string
POSITIVE: string
UnionMember6 { DSA, ECDSA, RSA }
DSA: string
ECDSA: string
RSA: string
UnionMember7 { domain, extended, organization, unknown }
domain: string
extended: string
organization: string
unknown: string
CTTimeseriesResponse { meta }
meta: Meta { aggInterval, confidenceInfo, dateRange, 3 more }

Metadata for the results.

aggInterval: "FIFTEEN_MINUTES" | "ONE_HOUR" | "ONE_DAY" | 2 more

Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals.

One of the following:
"FIFTEEN_MINUTES"
"ONE_HOUR"
"ONE_DAY"
"ONE_WEEK"
"ONE_MONTH"
confidenceInfo: ConfidenceInfo { annotations, level }
annotations: Array<Annotation>
dataSource: "ALL" | "AI_BOTS" | "AI_GATEWAY" | 22 more

Data source for annotations.

One of the following:
"ALL"
"AI_BOTS"
"AI_GATEWAY"
"BGP"
"BOTS"
"CONNECTION_ANOMALY"
"CT"
"DNS"
"DNS_MAGNITUDE"
"DNS_AS112"
"DOS"
"EMAIL_ROUTING"
"EMAIL_SECURITY"
"FW"
"FW_PG"
"HTTP"
"HTTP_CONTROL"
"HTTP_CRAWLER_REFERER"
"HTTP_ORIGINS"
"IQI"
"LEAKED_CREDENTIALS"
"NET"
"ROBOTS_TXT"
"SPEED"
"WORKERS_AI"
description: string
endDate: string
formatdate-time
eventType: "EVENT" | "GENERAL" | "OUTAGE" | 3 more

Event type for annotations.

One of the following:
"EVENT"
"GENERAL"
"OUTAGE"
"PARTIAL_PROJECTION"
"PIPELINE"
"TRAFFIC_ANOMALY"
isInstantaneous: boolean

Whether event is a single point in time or a time range.

linkedUrl: string
formaturi
startDate: string
formatdate-time
level: number

Provides an indication of how much confidence Cloudflare has in the data.

dateRange: Array<DateRange>
endTime: string

Adjusted end of date range.

formatdate-time
startTime: string

Adjusted start of date range.

formatdate-time
lastUpdated: string

Timestamp of the last dataset update.

formatdate-time
normalization: "PERCENTAGE" | "MIN0_MAX" | "MIN_MAX" | 5 more

Normalization method applied to the results. Refer to Normalization methods.

One of the following:
"PERCENTAGE"
"MIN0_MAX"
"MIN_MAX"
"RAW_VALUES"
"PERCENTAGE_CHANGE"
"ROLLING_AVERAGE"
"OVERLAPPED_PERCENTAGE"
"RATIO"
units: Array<Unit>

Measurement units for the results.

name: string
value: string
CTTimeseriesGroupsResponse { meta, serie_0 }
meta: Meta { aggInterval, confidenceInfo, dateRange, 3 more }

Metadata for the results.

aggInterval: "FIFTEEN_MINUTES" | "ONE_HOUR" | "ONE_DAY" | 2 more

Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals.

One of the following:
"FIFTEEN_MINUTES"
"ONE_HOUR"
"ONE_DAY"
"ONE_WEEK"
"ONE_MONTH"
confidenceInfo: ConfidenceInfo { annotations, level }
annotations: Array<Annotation>
dataSource: "ALL" | "AI_BOTS" | "AI_GATEWAY" | 22 more

Data source for annotations.

One of the following:
"ALL"
"AI_BOTS"
"AI_GATEWAY"
"BGP"
"BOTS"
"CONNECTION_ANOMALY"
"CT"
"DNS"
"DNS_MAGNITUDE"
"DNS_AS112"
"DOS"
"EMAIL_ROUTING"
"EMAIL_SECURITY"
"FW"
"FW_PG"
"HTTP"
"HTTP_CONTROL"
"HTTP_CRAWLER_REFERER"
"HTTP_ORIGINS"
"IQI"
"LEAKED_CREDENTIALS"
"NET"
"ROBOTS_TXT"
"SPEED"
"WORKERS_AI"
description: string
endDate: string
formatdate-time
eventType: "EVENT" | "GENERAL" | "OUTAGE" | 3 more

Event type for annotations.

One of the following:
"EVENT"
"GENERAL"
"OUTAGE"
"PARTIAL_PROJECTION"
"PIPELINE"
"TRAFFIC_ANOMALY"
isInstantaneous: boolean

Whether event is a single point in time or a time range.

linkedUrl: string
formaturi
startDate: string
formatdate-time
level: number

Provides an indication of how much confidence Cloudflare has in the data.

dateRange: Array<DateRange>
endTime: string

Adjusted end of date range.

formatdate-time
startTime: string

Adjusted start of date range.

formatdate-time
lastUpdated: string

Timestamp of the last dataset update.

formatdate-time
normalization: "PERCENTAGE" | "MIN0_MAX" | "MIN_MAX" | 5 more

Normalization method applied to the results. Refer to Normalization methods.

One of the following:
"PERCENTAGE"
"MIN0_MAX"
"MIN_MAX"
"RAW_VALUES"
"PERCENTAGE_CHANGE"
"ROLLING_AVERAGE"
"OVERLAPPED_PERCENTAGE"
"RATIO"
units: Array<Unit>

Measurement units for the results.

name: string
value: string
serie_0: UnnamedSchemaRef7826220e105d84352ba1108d9ed88e55 { timestamps } | UnionMember1 { rfc6962, static } | UnionMember2 { gt_121d, gt_16d_lte_31d, gt_31d_lte_91d, 3 more } | 5 more
One of the following:
UnnamedSchemaRef7826220e105d84352ba1108d9ed88e55 { timestamps }
timestamps: Array<string>
UnionMember1 { rfc6962, static }
rfc6962: Array<string>
static: Array<string>
UnionMember2 { gt_121d, gt_16d_lte_31d, gt_31d_lte_91d, 3 more }
gt_121d: Array<string>
gt_16d_lte_31d: Array<string>
gt_31d_lte_91d: Array<string>
gt_3d_lte_16d: Array<string>
gt_91d_lte_121d: Array<string>
lte_3d: Array<string>
UnionMember3 { CERTIFICATE, PRECERTIFICATE }
CERTIFICATE: Array<string>
PRECERTIFICATE: Array<string>
UnionMember4 { EXPIRED, VALID }
EXPIRED: Array<string>
VALID: Array<string>
UnionMember5 { NEGATIVE, POSITIVE }
NEGATIVE: Array<string>
POSITIVE: Array<string>
UnionMember6 { DSA, ECDSA, RSA }
DSA: Array<string>
ECDSA: Array<string>
RSA: Array<string>
UnionMember7 { domain, extended, organization, unknown }
domain: Array<string>
extended: Array<string>
organization: Array<string>
unknown: Array<string>

CTAuthorities

Get certificate authority details
client.radar.ct.authorities.get(stringcaSlug, AuthorityGetParams { format } query?, RequestOptionsoptions?): AuthorityGetResponse { certificateAuthority }
GET/radar/ct/authorities/{ca_slug}
List certificate authorities
client.radar.ct.authorities.list(AuthorityListParams { format, limit, offset } query?, RequestOptionsoptions?): AuthorityListResponse { certificateAuthorities }
GET/radar/ct/authorities
ModelsExpand Collapse
AuthorityGetResponse { certificateAuthority }
certificateAuthority: CertificateAuthority { appleStatus, authorityKeyIdentifier, certificateRecordType, 15 more }
appleStatus: "INCLUDED" | "NOT_YET_INCLUDED" | "NOT_INCLUDED" | 4 more

The inclusion status of a Certificate Authority (CA) in the trust store.

One of the following:
"INCLUDED"
"NOT_YET_INCLUDED"
"NOT_INCLUDED"
"NOT_BEFORE"
"REMOVED"
"DISABLED"
"BLOCKED"
authorityKeyIdentifier: string

The authorityKeyIdentifier value extracted from the certificate PEM.

certificateRecordType: "ROOT_CERTIFICATE" | "INTERMEDIATE_CERTIFICATE"

Specifies the type of certificate in the trust chain.

One of the following:
"ROOT_CERTIFICATE"
"INTERMEDIATE_CERTIFICATE"
chromeStatus: "INCLUDED" | "NOT_YET_INCLUDED" | "NOT_INCLUDED" | 4 more

The inclusion status of a Certificate Authority (CA) in the trust store.

One of the following:
"INCLUDED"
"NOT_YET_INCLUDED"
"NOT_INCLUDED"
"NOT_BEFORE"
"REMOVED"
"DISABLED"
"BLOCKED"
country: string

The two-letter ISO country code where the CA organization is based.

countryName: string

The full country name corresponding to the country code.

microsoftStatus: "INCLUDED" | "NOT_YET_INCLUDED" | "NOT_INCLUDED" | 4 more

The inclusion status of a Certificate Authority (CA) in the trust store.

One of the following:
"INCLUDED"
"NOT_YET_INCLUDED"
"NOT_INCLUDED"
"NOT_BEFORE"
"REMOVED"
"DISABLED"
"BLOCKED"
mozillaStatus: "INCLUDED" | "NOT_YET_INCLUDED" | "NOT_INCLUDED" | 4 more

The inclusion status of a Certificate Authority (CA) in the trust store.

One of the following:
"INCLUDED"
"NOT_YET_INCLUDED"
"NOT_INCLUDED"
"NOT_BEFORE"
"REMOVED"
"DISABLED"
"BLOCKED"
name: string

The full name of the certificate authority (CA).

owner: string

The organization that owns and operates the CA.

parentName: string

The name of the parent/root certificate authority that issued this intermediate certificate.

parentSha256Fingerprint: string

The SHA-256 fingerprint of the parent certificate.

One of the following:
One of the following:
revocationStatus: "NOT_REVOKED" | "REVOKED" | "PARENT_CERT_REVOKED"

The current revocation status of a Certificate Authority (CA) certificate.

One of the following:
"NOT_REVOKED"
"REVOKED"
"PARENT_CERT_REVOKED"
sha256Fingerprint: string

The SHA-256 fingerprint of the intermediate certificate.

subjectKeyIdentifier: string

The subjectKeyIdentifier value extracted from the certificate PEM.

validFrom: string

The start date of the certificate’s validity period (ISO format).

validTo: string

The end date of the certificate’s validity period (ISO format).

AuthorityListResponse { certificateAuthorities }
certificateAuthorities: Array<CertificateAuthority>
certificateRecordType: "ROOT_CERTIFICATE" | "INTERMEDIATE_CERTIFICATE"

Specifies the type of certificate in the trust chain.

One of the following:
"ROOT_CERTIFICATE"
"INTERMEDIATE_CERTIFICATE"
country: string

The two-letter ISO country code where the CA organization is based.

countryName: string

The full country name corresponding to the country code.

name: string

The full name of the certificate authority (CA).

owner: string

The organization that owns and operates the CA.

parentName: string

The name of the parent/root certificate authority that issued this intermediate certificate.

parentSha256Fingerprint: string

The SHA-256 fingerprint of the parent certificate.

revocationStatus: "NOT_REVOKED" | "REVOKED" | "PARENT_CERT_REVOKED"

The current revocation status of a Certificate Authority (CA) certificate.

One of the following:
"NOT_REVOKED"
"REVOKED"
"PARENT_CERT_REVOKED"
sha256Fingerprint: string

The SHA-256 fingerprint of the intermediate certificate.

CTLogs

Get certificate log details
client.radar.ct.logs.get(stringlogSlug, LogGetParams { format } query?, RequestOptionsoptions?): LogGetResponse { certificateLog }
GET/radar/ct/logs/{log_slug}
List certificate logs
client.radar.ct.logs.list(LogListParams { format, limit, offset } query?, RequestOptionsoptions?): LogListResponse { certificateLogs }
GET/radar/ct/logs
ModelsExpand Collapse
LogGetResponse { certificateLog }
certificateLog: CertificateLog { api, avgThroughput, description, 12 more }
api: "RFC6962" | "STATIC"

The API standard that the certificate log follows.

One of the following:
"RFC6962"
"STATIC"
avgThroughput: number

The average throughput of the CT log, measured in certificates per hour (certs/hour).

description: string

A brief description of the certificate log.

endExclusive: string

The end date and time for when the log will stop accepting certificates.

formatdate-time
lastUpdate: string

Timestamp of the most recent update to the CT log.

formatdate-time
operator: string

The organization responsible for operating the certificate log.

performance: Performance | null

Log performance metrics, including averages and per-endpoint details.

endpoints: Array<Endpoint>
endpoint: "add-chain (new)" | "add-chain (old)" | "add-pre-chain (new)" | 4 more

The certificate log endpoint names used in performance metrics.

One of the following:
"add-chain (new)"
"add-chain (old)"
"add-pre-chain (new)"
"add-pre-chain (old)"
"get-entries"
"get-roots"
"get-sth"
responseTime: number
uptime: number
responseTime: number
uptime: number
One of the following:
slug: string

A URL-friendly, kebab-case identifier for the certificate log.

startInclusive: string

The start date and time for when the log starts accepting certificates.

formatdate-time
state: "USABLE" | "PENDING" | "QUALIFIED" | 3 more

The current state of the certificate log. More details about log states can be found here: https://googlechrome.github.io/CertificateTransparency/log_states.html

One of the following:
"USABLE"
"PENDING"
"QUALIFIED"
"READ_ONLY"
"RETIRED"
"REJECTED"
stateTimestamp: string

Timestamp of when the log state was last updated.

formatdate-time
submittableCertCount: string | null

Number of certificates that are eligible for inclusion to this log but have not been included yet. Based on certificates signed by trusted root CAs within the log's accepted date range.

submittedCertCount: string | null

Number of certificates already included in this CT log.

url: string

The URL for the certificate log.

LogListResponse { certificateLogs }
certificateLogs: Array<CertificateLog>
api: "RFC6962" | "STATIC"

The API standard that the certificate log follows.

One of the following:
"RFC6962"
"STATIC"
description: string

A brief description of the certificate log.

endExclusive: string

The end date and time for when the log will stop accepting certificates.

formatdate-time
operator: string

The organization responsible for operating the certificate log.

slug: string

A URL-friendly, kebab-case identifier for the certificate log.

startInclusive: string

The start date and time for when the log starts accepting certificates.

formatdate-time
state: "USABLE" | "PENDING" | "QUALIFIED" | 3 more

The current state of the certificate log. More details about log states can be found here: https://googlechrome.github.io/CertificateTransparency/log_states.html

One of the following:
"USABLE"
"PENDING"
"QUALIFIED"
"READ_ONLY"
"RETIRED"
"REJECTED"
stateTimestamp: string

Timestamp of when the log state was last updated.

formatdate-time
url: string

The URL for the certificate log.