Skip to main content
GET
Get a certificate

Autorizaciones

Authorization
string
header
requerido

JWT bearer token issued by the identity provider.

Parámetros de ruta

certificateId
string<uuid>
requerido

Certificate id.

Respuesta

OK

authorityCode
integer<int64>
requerido

BACEN certificate-authority code (C10/C12 on the SFN wire): 1 SPB-Serpro, 2 SPB-Certisign, 3 Pessoas Fisicas, 4 SPB-Serasa, 5 SPB-CAIXA, 6 SPB-Valid, 7 SPB-Soluti. Derived from the certificate's own ISSUER block (OU=CSPB-N), never supplied. sfnCertificateId is unique only WITHIN this authority, so the two together are the identity.

daysToExpiry
integer<int64>
requerido

Whole days until expiry (0 the day it lapses, negative once expired). Always present — a real 0 is the most urgent operator signal.

id
string<uuid>
requerido

Certificate id.

notAfter
string<date-time>
requerido

Validity end (expiry).

sfnCertificateId
string
requerido

Exact 64-hex C11 identity used on the SFN wire: the hex encoding of the 32-byte slot, whose content is the certificate serial in uppercase ASCII hex, right-aligned and zero-left-padded. No ISPB. Unique only within authorityCode.

subject
string
requerido

Certificate subject DN.

Ejemplo:

"CN=46026562, OU=SILOC"

custodyReference
string

Opaque reference to the private key in the FI's custody; the key itself is never stored here.

notBefore
string<date-time>

Validity start.

revokedAt
string<date-time>

Revocation time. Omitted while the certificate is active.

serialNumber
string

Certificate serial number.