--- title: Get time series of certificate distribution by dimension --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) [Radar](https://developers.cloudflare.com/api/resources/radar) [CT](https://developers.cloudflare.com/api/resources/radar/subresources/ct) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Get time series of certificate distribution by dimension GET/radar/ct/timeseries\_groups/{dimension} Retrieves the distribution of certificates grouped by the specified dimension over time. ##### Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

##### Accepted Permissions (at least one required) `User Details Write``User Details Read` ##### P ath ParametersExpand Collapse

dimension: "CA"or "CA\_OWNER"or "DURATION"or 11 more Specifies the certificate attribute by which to group the results.

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20dimension%20%3E%20(schema)>) ##### Q uery ParametersExpand Collapse

aggInterval: optional "15m"or "1h"or "1d"or "1w" Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals. When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected.

One of the following: "15m" Link to this property "1h" Link to this property "1d" Link to this property "1w" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20aggInterval%20%3E%20(schema)>) ca: optional array of string Filters results by certificate authority. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20ca%20%3E%20(schema)>) caOwner: optional array of string Filters results by certificate authority owner. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20caOwner%20%3E%20(schema)>) dateEnd: optional array of string End of the date range (inclusive). Alternative to `dateRange`; provide together with `dateStart`. When requesting comparison series, every series must resolve to the same duration as the main series. Each `dateStart`/`dateEnd` is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20dateEnd%20%3E%20(schema)>) dateRange: optional array of string Filters results by relative date range ending at the current time, with each value producing a separate series. Use `d` for days (up to `364d`) or `w` for weeks (up to `52w`). Append `control` to request the equivalent previous period for comparison: the comparison window is shifted back by the current window’s length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. `7dcontrol` covers days -14 to -7, `10dcontrol` covers days -24 to -14). For example, pass `7d` and `7dcontrol` to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including `control`) satisfy this automatically. Use this parameter or set specific start and end dates (`dateStart` and `dateEnd` parameters). [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20dateRange%20%3E%20(schema)>) dateStart: optional array of string Start of the date range. Alternative to `dateRange`; provide together with `dateEnd`. When requesting comparison series, every series must resolve to the same duration as the main series. Each `dateStart`/`dateEnd` is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20dateStart%20%3E%20(schema)>)

duration: optional array of "LTE\_3D"or "GT\_3D\_LTE\_7D"or "GT\_7D\_LTE\_10D"or 4 more Filters results by certificate duration.

One of the following: "LTE\_3D" Link to this property "GT\_3D\_LTE\_7D" Link to this property "GT\_7D\_LTE\_10D" Link to this property "GT\_10D\_LTE\_47D" Link to this property "GT\_47D\_LTE\_100D" Link to this property "GT\_100D\_LTE\_200D" Link to this property "GT\_200D" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20duration%20%3E%20(schema)>)

entryType: optional array of "PRECERTIFICATE"or "CERTIFICATE" Filters results by entry type (certificate vs. pre-certificate). Incompatible with the tld filter/dimension.

One of the following: "PRECERTIFICATE" Link to this property "CERTIFICATE" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20entryType%20%3E%20(schema)>)

expirationStatus: optional array of "EXPIRED"or "VALID" Filters results by expiration status (expired vs. valid).

One of the following: "EXPIRED" Link to this property "VALID" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20expirationStatus%20%3E%20(schema)>)

format: optional "JSON"or "CSV" Format in which results will be returned.

One of the following: "JSON" Link to this property "CSV" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20format%20%3E%20(schema)>) hasIps: optional array of boolean Filters results based on whether the certificates are bound to specific IP addresses. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20hasIps%20%3E%20(schema)>) hasWildcards: optional array of boolean Filters results based on whether the certificates contain wildcard domains. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20hasWildcards%20%3E%20(schema)>) limitPerGroup: optional number Limits the number of objects per group to the top items within the specified time range. When item count exceeds the limit, extra items appear grouped under an “other” category. Only supported on high-cardinality dimensions; otherwise the request is rejected. Minimum value is 2. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20limitPerGroup%20%3E%20(schema)>) log: optional array of string Filters results by certificate log. Incompatible with the `tld` filter/dimension. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20log%20%3E%20(schema)>)

logApi: optional array of "RFC6962"or "STATIC" Filters results by certificate log API (RFC6962 vs. static). Incompatible with the tld filter/dimension.

One of the following: "RFC6962" Link to this property "STATIC" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20logApi%20%3E%20(schema)>) logOperator: optional array of string Filters results by certificate log operator. Incompatible with the `tld` filter/dimension. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20logOperator%20%3E%20(schema)>) name: optional array of string Array of names used to label the series in the response. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20name%20%3E%20(schema)>)

normalization: optional "RAW\_VALUES"or "PERCENTAGE" Normalization method applied to the results. Refer to Normalization methods.

One of the following: "RAW\_VALUES" Link to this property "PERCENTAGE" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20normalization%20%3E%20(schema)>)

publicKeyAlgorithm: optional array of "DSA"or "ECDSA"or "RSA" Filters results by public key algorithm.

One of the following: "DSA" Link to this property "ECDSA" Link to this property "RSA" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20publicKeyAlgorithm%20%3E%20(schema)>)

signatureAlgorithm: optional array of "DSA\_SHA\_1"or "DSA\_SHA\_256"or "ECDSA\_SHA\_1"or 12 more Filters results by signature algorithm.

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20signatureAlgorithm%20%3E%20(schema)>) tld: optional array of string Filters results by top-level domain. Incompatible with the `log`, `logApi`, `logOperator`, and `entryType` filters/dimensions. [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20tld%20%3E%20(schema)>)

uniqueEntries: optional array of "true"or "false" Specifies whether to filter out duplicate certificates and pre-certificates. Set to true for unique entries only.

One of the following: "true" Link to this property "false" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20uniqueEntries%20%3E%20(schema)>)

validationLevel: optional array of "DOMAIN"or "ORGANIZATION"or "EXTENDED" Filters results by validation level.

One of the following: "DOMAIN" Link to this property "ORGANIZATION" Link to this property "EXTENDED" Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(params)%20default%20%3E%20(param)%20validationLevel%20%3E%20(schema)>) ##### ReturnsExpand Collapse

result: object {meta, serie\_0 }

meta: object {aggInterval, confidenceInfo, dateRange, 3 more } Metadata for the results.

aggInterval: "FIFTEEN\_MINUTES"or "ONE\_HOUR"or "ONE\_DAY"or 2 more Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to Aggregation intervals.

One of the following: "FIFTEEN\_MINUTES" Link to this property "ONE\_HOUR" Link to this property "ONE\_DAY" Link to this property "ONE\_WEEK" Link to this property "ONE\_MONTH" Link to this property

Link to this property

confidenceInfo: object {annotations, level }

annotations: array of object {dataSource, description, endDate, 5 more }

dataSource: "ALL"or "AI\_BOTS"or "AI\_GATEWAY"or 22 more Data source for annotations.

Link to this property description: string Link to this property endDate: string formatdate-time Link to this property

eventType: "GENERAL"or "OUTAGE"or "PARTIAL\_PROJECTION"or 2 more Event type for annotations.

One of the following: "GENERAL" Link to this property "OUTAGE" Link to this property "PARTIAL\_PROJECTION" Link to this property "PIPELINE" Link to this property "TRAFFIC\_ANOMALY" Link to this property

Link to this property isInstantaneous: boolean Whether event is a single point in time or a time range. Link to this property linkedUrl: string formaturi Link to this property startDate: string formatdate-time Link to this property tags: optional array of string Link to this property

Link to this property level: number Provides an indication of how much confidence Cloudflare has in the data. Link to this property

Link to this property

dateRange: array of object {endTime, startTime }

endTime: string Adjusted end of date range. formatdate-time Link to this property startTime: string Adjusted start of date range. formatdate-time Link to this property

Link to this property lastUpdated: string Timestamp of the last dataset update. formatdate-time Link to this property

normalization: "PERCENTAGE"or "MIN0\_MAX"or "MIN\_MAX"or 5 more Normalization method applied to the results. Refer to Normalization methods.

One of the following: "PERCENTAGE" Link to this property "MIN0\_MAX" Link to this property "MIN\_MAX" Link to this property "RAW\_VALUES" Link to this property "PERCENTAGE\_CHANGE" Link to this property "ROLLING\_AVERAGE" Link to this property "OVERLAPPED\_PERCENTAGE" Link to this property "RATIO" Link to this property

Link to this property

units: array of object {name, value } Measurement units for the results.

name: string Link to this property value: string Link to this property

Link to this property

serie\_0: object {timestamps } or object {rfc6962, static } or object {gt\_121d, gt\_16d\_lte\_31d, gt\_31d\_lte\_91d, 3 more } or 5 more

One of the following:

UnnamedSchemaRef7826220e105d84352ba1108d9ed88e55 object {timestamps }

timestamps: array of string Link to this property

Link to this property

object {rfc6962, static }

rfc6962: array of string Link to this property static: array of string Link to this property

Link to this property

object {gt\_121d, gt\_16d\_lte\_31d, gt\_31d\_lte\_91d, 3 more }

gt\_121d: array of string Link to this property gt\_16d\_lte\_31d: array of string Link to this property gt\_31d\_lte\_91d: array of string Link to this property gt\_3d\_lte\_16d: array of string Link to this property gt\_91d\_lte\_121d: array of string Link to this property lte\_3d: array of string Link to this property

Link to this property

object {CERTIFICATE, PRECERTIFICATE }

CERTIFICATE: array of string Link to this property PRECERTIFICATE: array of string Link to this property

Link to this property

object {EXPIRED, VALID }

EXPIRED: array of string Link to this property VALID: array of string Link to this property

Link to this property

object {NEGATIVE, POSITIVE }

NEGATIVE: array of string Link to this property POSITIVE: array of string Link to this property

Link to this property

object {DSA, ECDSA, RSA }

DSA: array of string Link to this property ECDSA: array of string Link to this property RSA: array of string Link to this property

Link to this property

object {domain, extended, organization, unknown }

domain: array of string Link to this property extended: array of string Link to this property organization: array of string Link to this property unknown: array of string Link to this property

Link to this property

[Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(network%20schema)%20%3E%20(property)%20result>) success: boolean [Link to this property](<#(resource)%20radar.ct%20%3E%20(method)%20timeseries_groups%20%3E%20(network%20schema)%20%3E%20(property)%20success>) ### Get time series of certificate distribution by dimension HTTP HTTPTypeScriptPythonGoTerraform ``` curl https://api.cloudflare.com/client/v4/radar/ct/timeseries_groups/$DIMENSION \ -H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" ``` 200 example ``` { "result": { "meta": { "aggInterval": "FIFTEEN_MINUTES", "confidenceInfo": { "annotations": [ { "dataSource": "ALL", "description": "Cable cut in Tonga", "endDate": "2019-12-27T18:11:19.117Z", "eventType": "GENERAL", "isInstantaneous": true, "linkedUrl": "https://example.com", "startDate": "2019-12-27T18:11:19.117Z", "tags": [ "BOT_CLASS" ] } ], "level": 0 }, "dateRange": [ { "endTime": "2022-09-17T10:22:57.555Z", "startTime": "2022-09-16T10:22:57.555Z" } ], "lastUpdated": "2019-12-27T18:11:19.117Z", "normalization": "PERCENTAGE", "units": [ { "name": "*", "value": "requests" } ] }, "serie_0": { "timestamps": [ "2023-08-08T10:15:00Z" ] } }, "success": true } ``` ##### Returns Examples 200 example ``` { "result": { "meta": { "aggInterval": "FIFTEEN_MINUTES", "confidenceInfo": { "annotations": [ { "dataSource": "ALL", "description": "Cable cut in Tonga", "endDate": "2019-12-27T18:11:19.117Z", "eventType": "GENERAL", "isInstantaneous": true, "linkedUrl": "https://example.com", "startDate": "2019-12-27T18:11:19.117Z", "tags": [ "BOT_CLASS" ] } ], "level": 0 }, "dateRange": [ { "endTime": "2022-09-17T10:22:57.555Z", "startTime": "2022-09-16T10:22:57.555Z" } ], "lastUpdated": "2019-12-27T18:11:19.117Z", "normalization": "PERCENTAGE", "units": [ { "name": "*", "value": "requests" } ] }, "serie_0": { "timestamps": [ "2023-08-08T10:15:00Z" ] } }, "success": true } ```