--- title: List Client Certificates --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) [Client Certificates](https://developers.cloudflare.com/api/resources/client_certificates) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # List Client Certificates GET/zones/{zone\_id}/client\_certificates List all of your Zone’s API Shield mTLS Client Certificates by Status and/or using Pagination. ##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

##### Accepted Permissions (at least one required) `SSL and Certificates Write``SSL and Certificates Read` ##### P ath ParametersExpand Collapse zone\_id: string Identifier. maxLength32 [Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>) ##### Q uery ParametersExpand Collapse limit: optional number Limit to the number of records returned. [Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20limit%20%3E%20(schema)>) offset: optional number Offset the results. [Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20offset%20%3E%20(schema)>) page: optional number Page number of paginated results. minimum1 [Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20page%20%3E%20(schema)>) per\_page: optional number Number of records per page. maximum50 minimum5 [Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20per_page%20%3E%20(schema)>)

status: optional "all"or "active"or "pending\_reactivation"or 2 more Client Certitifcate Status to filter results by.

One of the following: "all" Link to this property "active" Link to this property "pending\_reactivation" Link to this property "pending\_revocation" Link to this property "revoked" Link to this property

[Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20status%20%3E%20(schema)>) ##### ReturnsExpand Collapse

errors: array of object {code, message, documentation\_url, source }

code: number minimum1000 Link to this property message: string Link to this property documentation\_url: optional string Link to this property

source: optional object {pointer }

pointer: optional string Link to this property

Link to this property

[Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)

messages: array of object {code, message, documentation\_url, source }

code: number minimum1000 Link to this property message: string Link to this property documentation\_url: optional string Link to this property

source: optional object {pointer }

pointer: optional string Link to this property

Link to this property

[Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20messages>) success: true Whether the API call was successful. [Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20success>)

result: optional array of ClientCertificate { id, certificate, certificate\_authority, 15 more }

id: optional string Client Certificate Tag maxLength36 minLength36 Link to this property certificate: optional string The Client Certificate PEM. Link to this property

certificate\_authority: optional object {id, name } Certificate Authority used to issue the Client Certificate.

id: optional string Link to this property name: optional string Link to this property

Link to this property common\_name: optional string Common Name of the Client Certificate. Link to this property country: optional string Country, provided by the CSR. Link to this property csr: optional string The Certificate Signing Request (CSR). Must be newline-encoded. Link to this property expires\_on: optional string Date that the Client Certificate expires. Link to this property fingerprint\_sha256: optional string Unique identifier of the Client Certificate. Link to this property issued\_on: optional string Date that the Client Certificate was issued by the Certificate Authority. Link to this property location: optional string Location, provided by the CSR. Link to this property organization: optional string Organization, provided by the CSR. Link to this property organizational\_unit: optional string Organizational Unit, provided by the CSR. Link to this property serial\_number: optional string The serial number on the created Client Certificate. Link to this property signature: optional string The type of hash used for the Client Certificate.. Link to this property ski: optional string Subject Key Identifier. Link to this property state: optional string State, provided by the CSR. Link to this property

status: optional "active"or "pending\_reactivation"or "pending\_revocation"or "revoked" Client Certificates may be active or revoked, and the pending\_reactivation or pending\_revocation represent in-progress asynchronous transitions.

One of the following: "active" Link to this property "pending\_reactivation" Link to this property "pending\_revocation" Link to this property "revoked" Link to this property

Link to this property validity\_days: optional number The number of days the Client Certificate will be valid after the issued\_on date. Link to this property

[Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20result>)

result\_info: optional object {count, page, per\_page, 2 more }

count: optional number Total number of results for the requested service. Link to this property page: optional number Current page within paginated list of results. Link to this property per\_page: optional number Number of results per page of results. Link to this property total\_count: optional number Total results available without any search parameters. Link to this property total\_pages: optional number The number of total pages in the entire result set. Link to this property

[Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20result_info>) ### List Client Certificates HTTP HTTPTypeScriptPythonGoTerraform ``` curl https://api.cloudflare.com/client/v4/zones/$ZONE_ID/client_certificates \ -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": [ { "id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9", "certificate": "-----BEGIN CERTIFICATE-----\nMIIDmDCCAoC...dhDDE\n-----END CERTIFICATE-----", "certificate_authority": { "id": "568b6b74-7b0c-4755-8840-4e3b8c24adeb", "name": "Cloudflare Managed CA for account" }, "common_name": "Cloudflare", "country": "US", "csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIICY....\n-----END CERTIFICATE REQUEST-----", "expires_on": "2033-02-20T23:18:00Z", "fingerprint_sha256": "256c24690243359fb8cf139a125bd05ebf1d968b71e4caf330718e9f5c8a89ea", "issued_on": "2023-02-23T23:18:00Z", "location": "Somewhere", "organization": "Organization", "organizational_unit": "Organizational Unit", "serial_number": "3bb94ff144ac567b9f75ad664b6c55f8d5e48182", "signature": "SHA256WithRSA", "ski": "8e375af1389a069a0f921f8cc8e1eb12d784b949", "state": "CA", "status": "active", "validity_days": 3650 } ], "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": [ { "id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9", "certificate": "-----BEGIN CERTIFICATE-----\nMIIDmDCCAoC...dhDDE\n-----END CERTIFICATE-----", "certificate_authority": { "id": "568b6b74-7b0c-4755-8840-4e3b8c24adeb", "name": "Cloudflare Managed CA for account" }, "common_name": "Cloudflare", "country": "US", "csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIICY....\n-----END CERTIFICATE REQUEST-----", "expires_on": "2033-02-20T23:18:00Z", "fingerprint_sha256": "256c24690243359fb8cf139a125bd05ebf1d968b71e4caf330718e9f5c8a89ea", "issued_on": "2023-02-23T23:18:00Z", "location": "Somewhere", "organization": "Organization", "organizational_unit": "Organizational Unit", "serial_number": "3bb94ff144ac567b9f75ad664b6c55f8d5e48182", "signature": "SHA256WithRSA", "ski": "8e375af1389a069a0f921f8cc8e1eb12d784b949", "state": "CA", "status": "active", "validity_days": 3650 } ], "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 } } ```