Skip to content
Cloudflare API
Start here
API Reference
Radar

CT

Get certificate distribution by dimension
radar.ct.summary(Literal["CA", "CA_OWNER", "DURATION", 11 more]dimension, CTSummaryParams**kwargs) -> CTSummaryResponse
GET/radar/ct/summary/{dimension}
Get certificates time series
radar.ct.timeseries(CTTimeseriesParams**kwargs) -> CTTimeseriesResponse
GET/radar/ct/timeseries
Get time series of certificate distribution by dimension
radar.ct.timeseries_groups(Literal["CA", "CA_OWNER", "DURATION", 11 more]dimension, CTTimeseriesGroupsParams**kwargs) -> CTTimeseriesGroupsResponse
GET/radar/ct/timeseries_groups/{dimension}
ModelsExpand Collapse
class CTSummaryResponse: …
meta: Meta

Metadata for the results.

confidence_info: MetaConfidenceInfo
annotations: List[MetaConfidenceInfoAnnotation]
data_source: Literal["ALL", "AI_BOTS", "AI_GATEWAY", 22 more]

Data source for annotations.

One of the following:
"ALL"
"AI_BOTS"
"AI_GATEWAY"
"BGP"
"BOTS"
"CONNECTION_ANOMALY"
"CT"
"DNS"
"DNS_MAGNITUDE"
"DNS_AS112"
"DOS"
"EMAIL_ROUTING"
"EMAIL_SECURITY"
"FW"
"FW_PG"
"HTTP"
"HTTP_CONTROL"
"HTTP_CRAWLER_REFERER"
"HTTP_ORIGINS"
"IQI"
"LEAKED_CREDENTIALS"
"NET"
"ROBOTS_TXT"
"SPEED"
"WORKERS_AI"
description: str
end_date: datetime
formatdate-time
event_type: Literal["EVENT", "GENERAL", "OUTAGE", 3 more]

Event type for annotations.

One of the following:
"EVENT"
"GENERAL"
"OUTAGE"
"PARTIAL_PROJECTION"
"PIPELINE"
"TRAFFIC_ANOMALY"
is_instantaneous: bool

Whether event is a single point in time or a time range.

linked_url: str
formaturi
start_date: datetime
formatdate-time
level: int

Provides an indication of how much confidence Cloudflare has in the data.

date_range: List[MetaDateRange]
end_time: datetime

Adjusted end of date range.

formatdate-time
start_time: datetime

Adjusted start of date range.

formatdate-time
last_updated: datetime

Timestamp of the last dataset update.

formatdate-time
normalization: Literal["PERCENTAGE", "MIN0_MAX", "MIN_MAX", 5 more]

Normalization method applied to the results. Refer to Normalization methods.

One of the following:
"PERCENTAGE"
"MIN0_MAX"
"MIN_MAX"
"RAW_VALUES"
"PERCENTAGE_CHANGE"
"ROLLING_AVERAGE"
"OVERLAPPED_PERCENTAGE"
"RATIO"
units: List[MetaUnit]

Measurement units for the results.

name: str
value: str
summary_0: Summary0
One of the following:
Dict[str, str]
class Summary0UnionMember1: …
rfc6962: str
static: str
class Summary0UnionMember2: …
gt_121d: str
gt_16d_lte_31d: str
gt_31d_lte_91d: str
gt_3d_lte_16d: str
gt_91d_lte_121d: str
lte_3d: str
class Summary0UnionMember3: …
certificate: str
precertificate: str
class Summary0UnionMember4: …
expired: str
valid: str
class Summary0UnionMember5: …
negative: str
positive: str
class Summary0UnionMember6: …
dsa: str
ecdsa: str
rsa: str
class Summary0UnionMember7: …
domain: str
extended: str
organization: str
unknown: str
class CTTimeseriesResponse: …
meta: Meta

Metadata for the results.

agg_interval: Literal["FIFTEEN_MINUTES", "ONE_HOUR", "ONE_DAY", 2 more]

Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals.

One of the following:
"FIFTEEN_MINUTES"
"ONE_HOUR"
"ONE_DAY"
"ONE_WEEK"
"ONE_MONTH"
confidence_info: MetaConfidenceInfo
annotations: List[MetaConfidenceInfoAnnotation]
data_source: Literal["ALL", "AI_BOTS", "AI_GATEWAY", 22 more]

Data source for annotations.

One of the following:
"ALL"
"AI_BOTS"
"AI_GATEWAY"
"BGP"
"BOTS"
"CONNECTION_ANOMALY"
"CT"
"DNS"
"DNS_MAGNITUDE"
"DNS_AS112"
"DOS"
"EMAIL_ROUTING"
"EMAIL_SECURITY"
"FW"
"FW_PG"
"HTTP"
"HTTP_CONTROL"
"HTTP_CRAWLER_REFERER"
"HTTP_ORIGINS"
"IQI"
"LEAKED_CREDENTIALS"
"NET"
"ROBOTS_TXT"
"SPEED"
"WORKERS_AI"
description: str
end_date: datetime
formatdate-time
event_type: Literal["EVENT", "GENERAL", "OUTAGE", 3 more]

Event type for annotations.

One of the following:
"EVENT"
"GENERAL"
"OUTAGE"
"PARTIAL_PROJECTION"
"PIPELINE"
"TRAFFIC_ANOMALY"
is_instantaneous: bool

Whether event is a single point in time or a time range.

linked_url: str
formaturi
start_date: datetime
formatdate-time
level: int

Provides an indication of how much confidence Cloudflare has in the data.

date_range: List[MetaDateRange]
end_time: datetime

Adjusted end of date range.

formatdate-time
start_time: datetime

Adjusted start of date range.

formatdate-time
last_updated: datetime

Timestamp of the last dataset update.

formatdate-time
normalization: Literal["PERCENTAGE", "MIN0_MAX", "MIN_MAX", 5 more]

Normalization method applied to the results. Refer to Normalization methods.

One of the following:
"PERCENTAGE"
"MIN0_MAX"
"MIN_MAX"
"RAW_VALUES"
"PERCENTAGE_CHANGE"
"ROLLING_AVERAGE"
"OVERLAPPED_PERCENTAGE"
"RATIO"
units: List[MetaUnit]

Measurement units for the results.

name: str
value: str
class CTTimeseriesGroupsResponse: …
meta: Meta

Metadata for the results.

agg_interval: Literal["FIFTEEN_MINUTES", "ONE_HOUR", "ONE_DAY", 2 more]

Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals.

One of the following:
"FIFTEEN_MINUTES"
"ONE_HOUR"
"ONE_DAY"
"ONE_WEEK"
"ONE_MONTH"
confidence_info: MetaConfidenceInfo
annotations: List[MetaConfidenceInfoAnnotation]
data_source: Literal["ALL", "AI_BOTS", "AI_GATEWAY", 22 more]

Data source for annotations.

One of the following:
"ALL"
"AI_BOTS"
"AI_GATEWAY"
"BGP"
"BOTS"
"CONNECTION_ANOMALY"
"CT"
"DNS"
"DNS_MAGNITUDE"
"DNS_AS112"
"DOS"
"EMAIL_ROUTING"
"EMAIL_SECURITY"
"FW"
"FW_PG"
"HTTP"
"HTTP_CONTROL"
"HTTP_CRAWLER_REFERER"
"HTTP_ORIGINS"
"IQI"
"LEAKED_CREDENTIALS"
"NET"
"ROBOTS_TXT"
"SPEED"
"WORKERS_AI"
description: str
end_date: datetime
formatdate-time
event_type: Literal["EVENT", "GENERAL", "OUTAGE", 3 more]

Event type for annotations.

One of the following:
"EVENT"
"GENERAL"
"OUTAGE"
"PARTIAL_PROJECTION"
"PIPELINE"
"TRAFFIC_ANOMALY"
is_instantaneous: bool

Whether event is a single point in time or a time range.

linked_url: str
formaturi
start_date: datetime
formatdate-time
level: int

Provides an indication of how much confidence Cloudflare has in the data.

date_range: List[MetaDateRange]
end_time: datetime

Adjusted end of date range.

formatdate-time
start_time: datetime

Adjusted start of date range.

formatdate-time
last_updated: datetime

Timestamp of the last dataset update.

formatdate-time
normalization: Literal["PERCENTAGE", "MIN0_MAX", "MIN_MAX", 5 more]

Normalization method applied to the results. Refer to Normalization methods.

One of the following:
"PERCENTAGE"
"MIN0_MAX"
"MIN_MAX"
"RAW_VALUES"
"PERCENTAGE_CHANGE"
"ROLLING_AVERAGE"
"OVERLAPPED_PERCENTAGE"
"RATIO"
units: List[MetaUnit]

Measurement units for the results.

name: str
value: str
serie_0: Serie0
One of the following:
class Serie0UnnamedSchemaRef7826220e105d84352ba1108d9ed88e55: …
timestamps: List[datetime]
class Serie0UnionMember1: …
rfc6962: List[str]
static: List[str]
class Serie0UnionMember2: …
gt_121d: List[str]
gt_16d_lte_31d: List[str]
gt_31d_lte_91d: List[str]
gt_3d_lte_16d: List[str]
gt_91d_lte_121d: List[str]
lte_3d: List[str]
class Serie0UnionMember3: …
certificate: List[str]
precertificate: List[str]
class Serie0UnionMember4: …
expired: List[str]
valid: List[str]
class Serie0UnionMember5: …
negative: List[str]
positive: List[str]
class Serie0UnionMember6: …
dsa: List[str]
ecdsa: List[str]
rsa: List[str]
class Serie0UnionMember7: …
domain: List[str]
extended: List[str]
organization: List[str]
unknown: List[str]

CTAuthorities

Get certificate authority details
radar.ct.authorities.get(strca_slug, AuthorityGetParams**kwargs) -> AuthorityGetResponse
GET/radar/ct/authorities/{ca_slug}
List certificate authorities
radar.ct.authorities.list(AuthorityListParams**kwargs) -> AuthorityListResponse
GET/radar/ct/authorities
ModelsExpand Collapse
class AuthorityGetResponse: …
certificate_authority: CertificateAuthority
apple_status: Literal["INCLUDED", "NOT_YET_INCLUDED", "NOT_INCLUDED", 4 more]

The inclusion status of a Certificate Authority (CA) in the trust store.

One of the following:
"INCLUDED"
"NOT_YET_INCLUDED"
"NOT_INCLUDED"
"NOT_BEFORE"
"REMOVED"
"DISABLED"
"BLOCKED"
authority_key_identifier: str

The authorityKeyIdentifier value extracted from the certificate PEM.

certificate_record_type: Literal["ROOT_CERTIFICATE", "INTERMEDIATE_CERTIFICATE"]

Specifies the type of certificate in the trust chain.

One of the following:
"ROOT_CERTIFICATE"
"INTERMEDIATE_CERTIFICATE"
chrome_status: Literal["INCLUDED", "NOT_YET_INCLUDED", "NOT_INCLUDED", 4 more]

The inclusion status of a Certificate Authority (CA) in the trust store.

One of the following:
"INCLUDED"
"NOT_YET_INCLUDED"
"NOT_INCLUDED"
"NOT_BEFORE"
"REMOVED"
"DISABLED"
"BLOCKED"
country: str

The two-letter ISO country code where the CA organization is based.

country_name: str

The full country name corresponding to the country code.

microsoft_status: Literal["INCLUDED", "NOT_YET_INCLUDED", "NOT_INCLUDED", 4 more]

The inclusion status of a Certificate Authority (CA) in the trust store.

One of the following:
"INCLUDED"
"NOT_YET_INCLUDED"
"NOT_INCLUDED"
"NOT_BEFORE"
"REMOVED"
"DISABLED"
"BLOCKED"
mozilla_status: Literal["INCLUDED", "NOT_YET_INCLUDED", "NOT_INCLUDED", 4 more]

The inclusion status of a Certificate Authority (CA) in the trust store.

One of the following:
"INCLUDED"
"NOT_YET_INCLUDED"
"NOT_INCLUDED"
"NOT_BEFORE"
"REMOVED"
"DISABLED"
"BLOCKED"
name: str

The full name of the certificate authority (CA).

owner: str

The organization that owns and operates the CA.

parent_name: str

The name of the parent/root certificate authority that issued this intermediate certificate.

parent_sha256_fingerprint: str

The SHA-256 fingerprint of the parent certificate.

One of the following:
One of the following:
revocation_status: Literal["NOT_REVOKED", "REVOKED", "PARENT_CERT_REVOKED"]

The current revocation status of a Certificate Authority (CA) certificate.

One of the following:
"NOT_REVOKED"
"REVOKED"
"PARENT_CERT_REVOKED"
sha256_fingerprint: str

The SHA-256 fingerprint of the intermediate certificate.

subject_key_identifier: str

The subjectKeyIdentifier value extracted from the certificate PEM.

valid_from: str

The start date of the certificate’s validity period (ISO format).

valid_to: str

The end date of the certificate’s validity period (ISO format).

class AuthorityListResponse: …
certificate_authorities: List[CertificateAuthority]
certificate_record_type: Literal["ROOT_CERTIFICATE", "INTERMEDIATE_CERTIFICATE"]

Specifies the type of certificate in the trust chain.

One of the following:
"ROOT_CERTIFICATE"
"INTERMEDIATE_CERTIFICATE"
country: str

The two-letter ISO country code where the CA organization is based.

country_name: str

The full country name corresponding to the country code.

name: str

The full name of the certificate authority (CA).

owner: str

The organization that owns and operates the CA.

parent_name: str

The name of the parent/root certificate authority that issued this intermediate certificate.

parent_sha256_fingerprint: str

The SHA-256 fingerprint of the parent certificate.

revocation_status: Literal["NOT_REVOKED", "REVOKED", "PARENT_CERT_REVOKED"]

The current revocation status of a Certificate Authority (CA) certificate.

One of the following:
"NOT_REVOKED"
"REVOKED"
"PARENT_CERT_REVOKED"
sha256_fingerprint: str

The SHA-256 fingerprint of the intermediate certificate.

CTLogs

Get certificate log details
radar.ct.logs.get(strlog_slug, LogGetParams**kwargs) -> LogGetResponse
GET/radar/ct/logs/{log_slug}
List certificate logs
radar.ct.logs.list(LogListParams**kwargs) -> LogListResponse
GET/radar/ct/logs
ModelsExpand Collapse
class LogGetResponse: …
certificate_log: CertificateLog
api: Literal["RFC6962", "STATIC"]

The API standard that the certificate log follows.

One of the following:
"RFC6962"
"STATIC"
avg_throughput: float

The average throughput of the CT log, measured in certificates per hour (certs/hour).

description: str

A brief description of the certificate log.

end_exclusive: datetime

The end date and time for when the log will stop accepting certificates.

formatdate-time
last_update: datetime

Timestamp of the most recent update to the CT log.

formatdate-time
operator: str

The organization responsible for operating the certificate log.

performance: Optional[CertificateLogPerformance]

Log performance metrics, including averages and per-endpoint details.

endpoints: List[CertificateLogPerformanceEndpoint]
endpoint: Literal["add-chain (new)", "add-chain (old)", "add-pre-chain (new)", 4 more]

The certificate log endpoint names used in performance metrics.

One of the following:
"add-chain (new)"
"add-chain (old)"
"add-pre-chain (new)"
"add-pre-chain (old)"
"get-entries"
"get-roots"
"get-sth"
response_time: float
uptime: float
response_time: float
uptime: float
One of the following:
slug: str

A URL-friendly, kebab-case identifier for the certificate log.

start_inclusive: datetime

The start date and time for when the log starts accepting certificates.

formatdate-time
state: Literal["USABLE", "PENDING", "QUALIFIED", 3 more]

The current state of the certificate log. More details about log states can be found here: https://googlechrome.github.io/CertificateTransparency/log_states.html

One of the following:
"USABLE"
"PENDING"
"QUALIFIED"
"READ_ONLY"
"RETIRED"
"REJECTED"
state_timestamp: datetime

Timestamp of when the log state was last updated.

formatdate-time
submittable_cert_count: Optional[str]

Number of certificates that are eligible for inclusion to this log but have not been included yet. Based on certificates signed by trusted root CAs within the log's accepted date range.

submitted_cert_count: Optional[str]

Number of certificates already included in this CT log.

url: str

The URL for the certificate log.

class LogListResponse: …
certificate_logs: List[CertificateLog]
api: Literal["RFC6962", "STATIC"]

The API standard that the certificate log follows.

One of the following:
"RFC6962"
"STATIC"
description: str

A brief description of the certificate log.

end_exclusive: datetime

The end date and time for when the log will stop accepting certificates.

formatdate-time
operator: str

The organization responsible for operating the certificate log.

slug: str

A URL-friendly, kebab-case identifier for the certificate log.

start_inclusive: datetime

The start date and time for when the log starts accepting certificates.

formatdate-time
state: Literal["USABLE", "PENDING", "QUALIFIED", 3 more]

The current state of the certificate log. More details about log states can be found here: https://googlechrome.github.io/CertificateTransparency/log_states.html

One of the following:
"USABLE"
"PENDING"
"QUALIFIED"
"READ_ONLY"
"RETIRED"
"REJECTED"
state_timestamp: datetime

Timestamp of when the log state was last updated.

formatdate-time
url: str

The URL for the certificate log.