--- title: Get certificates time series --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) [Radar](https://developers.cloudflare.com/api/resources/radar) [CT](https://developers.cloudflare.com/api/resources/radar/subresources/ct) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Get certificates time series GET/radar/ct/timeseries Retrieves certificate volume over time. ##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

##### Accepted Permissions (at least one required) `User Details Write``User Details Read` ##### Q uery ParametersExpand Collapse

aggInterval: optional "15m"or "1h"or "1d"or "1w" Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected.

One of the following: "15m" Link to this property "1h" Link to this property "1d" Link to this property "1w" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20aggInterval%20%3E%20(schema)>) ca: optional array of string Filters results by certificate authority. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20ca%20%3E%20(schema)>) caOwner: optional array of string Filters results by certificate authority owner. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20caOwner%20%3E%20(schema)>) dateEnd: optional array of string End of the date range (inclusive). Alternative to `dateRange`; provide together with `dateStart`. When requesting comparison series, every series must resolve to the same duration as the main series. Each `dateStart`/`dateEnd` is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20dateEnd%20%3E%20(schema)>) dateRange: optional array of string Filters results by relative date range ending at the current time, with each value producing a separate series. Use `d` for days (up to `364d`) or `w` for weeks (up to `52w`). Append `control` to request the equivalent previous period for comparison: the comparison window is shifted back by the current window’s length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. `7dcontrol` covers days -14 to -7, `10dcontrol` covers days -24 to -14). For example, pass `7d` and `7dcontrol` to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including `control`) satisfy this automatically. Use this parameter or set specific start and end dates (`dateStart` and `dateEnd` parameters). [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20dateRange%20%3E%20(schema)>) dateStart: optional array of string Start of the date range. Alternative to `dateRange`; provide together with `dateEnd`. When requesting comparison series, every series must resolve to the same duration as the main series. Each `dateStart`/`dateEnd` is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20dateStart%20%3E%20(schema)>)

duration: optional array of "LTE\_3D"or "GT\_3D\_LTE\_7D"or "GT\_7D\_LTE\_10D"or 4 more Filters results by certificate duration.

One of the following: "LTE\_3D" Link to this property "GT\_3D\_LTE\_7D" Link to this property "GT\_7D\_LTE\_10D" Link to this property "GT\_10D\_LTE\_47D" Link to this property "GT\_47D\_LTE\_100D" Link to this property "GT\_100D\_LTE\_200D" Link to this property "GT\_200D" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20duration%20%3E%20(schema)>)

entryType: optional array of "PRECERTIFICATE"or "CERTIFICATE" Filters results by entry type (certificate vs. pre-certificate). Incompatible with the tld filter/dimension.

One of the following: "PRECERTIFICATE" Link to this property "CERTIFICATE" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20entryType%20%3E%20(schema)>)

expirationStatus: optional array of "EXPIRED"or "VALID" Filters results by expiration status (expired vs. valid).

One of the following: "EXPIRED" Link to this property "VALID" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20expirationStatus%20%3E%20(schema)>)

format: optional "JSON"or "CSV" Format in which results will be returned.

One of the following: "JSON" Link to this property "CSV" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20format%20%3E%20(schema)>) hasIps: optional array of boolean Filters results based on whether the certificates are bound to specific IP addresses. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20hasIps%20%3E%20(schema)>) hasWildcards: optional array of boolean Filters results based on whether the certificates contain wildcard domains. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20hasWildcards%20%3E%20(schema)>) log: optional array of string Filters results by certificate log. Incompatible with the `tld` filter/dimension. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20log%20%3E%20(schema)>)

logApi: optional array of "RFC6962"or "STATIC" Filters results by certificate log API (RFC6962 vs. static). Incompatible with the tld filter/dimension.

One of the following: "RFC6962" Link to this property "STATIC" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20logApi%20%3E%20(schema)>) logOperator: optional array of string Filters results by certificate log operator. Incompatible with the `tld` filter/dimension. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20logOperator%20%3E%20(schema)>) name: optional array of string Array of names used to label the series in the response. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20name%20%3E%20(schema)>)

publicKeyAlgorithm: optional array of "DSA"or "ECDSA"or "RSA" Filters results by public key algorithm.

One of the following: "DSA" Link to this property "ECDSA" Link to this property "RSA" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20publicKeyAlgorithm%20%3E%20(schema)>)

signatureAlgorithm: optional array of "DSA\_SHA\_1"or "DSA\_SHA\_256"or "ECDSA\_SHA\_1"or 12 more Filters results by signature algorithm.

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20signatureAlgorithm%20%3E%20(schema)>) tld: optional array of string Filters results by top-level domain. Incompatible with the `log`, `logApi`, `logOperator`, and `entryType` filters/dimensions. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20tld%20%3E%20(schema)>)

uniqueEntries: optional array of "true"or "false" Specifies whether to filter out duplicate certificates and pre-certificates. Set to true for unique entries only.

One of the following: "true" Link to this property "false" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20uniqueEntries%20%3E%20(schema)>)

validationLevel: optional array of "DOMAIN"or "ORGANIZATION"or "EXTENDED" Filters results by validation level.

One of the following: "DOMAIN" Link to this property "ORGANIZATION" Link to this property "EXTENDED" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(params)%20default%20%3E%20(param)%20validationLevel%20%3E%20(schema)>) ##### ReturnsExpand Collapse

result: object {meta }

meta: object {aggInterval, confidenceInfo, dateRange, 3 more } Metadata for the results.

aggInterval: "FIFTEEN\_MINUTES"or "ONE\_HOUR"or "ONE\_DAY"or 2 more Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals.

One of the following: "FIFTEEN\_MINUTES" Link to this property "ONE\_HOUR" Link to this property "ONE\_DAY" Link to this property "ONE\_WEEK" Link to this property "ONE\_MONTH" Link to this property

Link to this property

confidenceInfo: object {annotations, level }

annotations: array of object {dataSource, description, endDate, 5 more }

dataSource: "ALL"or "AI\_BOTS"or "AI\_GATEWAY"or 22 more Data source for annotations.

Link to this property description: string Link to this property endDate: string formatdate-time Link to this property

eventType: "GENERAL"or "OUTAGE"or "PARTIAL\_PROJECTION"or 2 more Event type for annotations.

One of the following: "GENERAL" Link to this property "OUTAGE" Link to this property "PARTIAL\_PROJECTION" Link to this property "PIPELINE" Link to this property "TRAFFIC\_ANOMALY" Link to this property

Link to this property isInstantaneous: boolean Whether event is a single point in time or a time range. Link to this property linkedUrl: string formaturi Link to this property startDate: string formatdate-time Link to this property tags: optional array of string Link to this property

Link to this property level: number Provides an indication of how much confidence Cloudflare has in the data. Link to this property

Link to this property

dateRange: array of object {endTime, startTime }

endTime: string Adjusted end of date range. formatdate-time Link to this property startTime: string Adjusted start of date range. formatdate-time Link to this property

Link to this property lastUpdated: string Timestamp of the last dataset update. formatdate-time Link to this property

normalization: "PERCENTAGE"or "MIN0\_MAX"or "MIN\_MAX"or 5 more Normalization method applied to the results. Refer to Normalization methods.

One of the following: "PERCENTAGE" Link to this property "MIN0\_MAX" Link to this property "MIN\_MAX" Link to this property "RAW\_VALUES" Link to this property "PERCENTAGE\_CHANGE" Link to this property "ROLLING\_AVERAGE" Link to this property "OVERLAPPED\_PERCENTAGE" Link to this property "RATIO" Link to this property

Link to this property

units: array of object {name, value } Measurement units for the results.

name: string Link to this property value: string Link to this property

Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(network%20schema)%20%3E%20(property)%20result>) success: boolean [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries%20%3E%20(network%20schema)%20%3E%20(property)%20success>) ### Get certificates time series HTTP HTTPTypeScriptPythonGoTerraform ``` curl https://api.cloudflare.com/client/v4/radar/ct/timeseries \ -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" ``` 200 example ``` { "result": { "meta": { "aggInterval": "FIFTEEN_MINUTES", "confidenceInfo": { "annotations": [ { "dataSource": "ALL", "description": "Cable cut in Tonga", "endDate": "2019-12-27T18:11:19.117Z", "eventType": "GENERAL", "isInstantaneous": true, "linkedUrl": "https://example.com", "startDate": "2019-12-27T18:11:19.117Z", "tags": [ "BOT_CLASS" ] } ], "level": 0 }, "dateRange": [ { "endTime": "2022-09-17T10:22:57.555Z", "startTime": "2022-09-16T10:22:57.555Z" } ], "lastUpdated": "2019-12-27T18:11:19.117Z", "normalization": "PERCENTAGE", "units": [ { "name": "*", "value": "requests" } ] } }, "success": true } ``` ##### Returns Examples 200 example ``` { "result": { "meta": { "aggInterval": "FIFTEEN_MINUTES", "confidenceInfo": { "annotations": [ { "dataSource": "ALL", "description": "Cable cut in Tonga", "endDate": "2019-12-27T18:11:19.117Z", "eventType": "GENERAL", "isInstantaneous": true, "linkedUrl": "https://example.com", "startDate": "2019-12-27T18:11:19.117Z", "tags": [ "BOT_CLASS" ] } ], "level": 0 }, "dateRange": [ { "endTime": "2022-09-17T10:22:57.555Z", "startTime": "2022-09-16T10:22:57.555Z" } ], "lastUpdated": "2019-12-27T18:11:19.117Z", "normalization": "PERCENTAGE", "units": [ { "name": "*", "value": "requests" } ] } }, "success": true } ```