List certificates in the MDM certificate repository with filtering and pagination

Get the list of certificates uploaded to the MDM certificate repository. Supports filtering by name, identity type, and certificate type with cursor-based pagination.

Endpoints

get /api/v1/mdm/profiles/certificates

Copy full URL

Request URL

https://{serverurl}/api/v1/mdm/profiles/certificates

Scope

MDMOnDemand.MDMDeviceMgmt.READCopied!

Header

Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52

Request Parameters

- Query Parameters

limitintegerOptional

Maximum number of records to return in a single response. Used together with offset for pagination

skip-tokenstringOptional

Pagination skip token for cursor-based pagination

offsetintegerOptional

Zero-based index of the first record to return. Used together with limit for pagination

delta-tokenstringOptional

Token used for delta/incremental fetches. Pass the token returned from a previous response to retrieve only items modified since that point

searchstringOptional

Filter certificates by display name (case-insensitive contains match)

identitybooleanOptional

If true, returns only identity certificates (those with a private key). If false, returns non-identity certificates

exclude_distribution_detailsbooleanOptional

If true, omits distribution details from the response

typeintegerOptional

Filter by certificate type. Default 0 (CA uploaded certificate). Use 3 for macOS FileVault institutional recovery certificates

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request GET \
  --url https://appdomain/api/v1/mdm/profiles/certificates \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomain/api/v1/mdm/profiles/certificates"))
        .header("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomain")

headers = { 'Authorization': "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52" }

conn.request("GET", "/api/v1/mdm/profiles/certificates", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Accept", "application/json");

    response = invokeUrl
    [
        url: "https://appDomain/api/v1/mdm/profiles/certificates"
        type: GET
        headers: headersMap
        
        
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomain/api/v1/mdm/profiles/certificates' -Method GET -Headers $headers

▼ Show full

Response Parameters

- HTTP code 200

Response Body - application/json

JSON object

Hide Sub-Attributes

certificatesJSON array

Array of certificate objects matching the query filters

Show Sub-Attributes

JSON object

Show Sub-Attributes

certificate_idstring

Unique identifier of the certificate

certificate_namestring

Display name of the certificate (typically the CN from the subject DN)

certificate_serial_numberstring

Serial number of the certificate

certificate_subject_dnstring

Full Subject Distinguished Name of the certificate

certificate_issuer_dnstring

Full Issuer Distinguished Name of the certificate

certificate_notbeforestring

Certificate validity start time in Unix milliseconds

certificate_notafterstring

Certificate expiry time in Unix milliseconds

certificate_orgstring

Organization name extracted from the certificate subject

issuer_orgstring

Organization name of the certificate issuer

issuer_namestring

Common Name (CN) of the certificate issuer

certificate_file_namestring

Original filename of the uploaded certificate file

days_to_expirestring

Number of days until the certificate expires

is_identityboolean

true if the certificate is an identity certificate (has a private key / password), false otherwise

metadataJSON object

Pagination metadata including total record count

Show Sub-Attributes

total_record_countstring

Total number of certificates matching the query

pagingJSON object

Pagination links for navigating result pages. Present only when results are paginated

Show Sub-Attributes

nextstring

URL to fetch the next page of results

previousstring

URL to fetch the previous page of results

Possible HTTP Status Codes

200HTTP code

Sample Response: HTTP 200

List of certificates with pagination metadata

Copied!

  {
    "metadata": {
      "total_record_count": "7"
    },
    "certificates": [
      {
        "days_to_expire": "343",
        "certificate_name": "APSP:99335a61-7acc-42a0-87fd-f564d36e2166",
        "is_identity": false,
        "certificate_notafter": "1572518494000",
        "certificate_org": "",
        "issuer_name": "Apple Application Integration 2 Certification Authority",
        "certificate_id": "9007199254741001",
        "certificate_issuer_dn": "C=US,O=Apple Inc.,OU=Apple Certification Authority,CN=Apple Application Integration 2 Certification Authority",
        "issuer_org": "Apple Inc.",
        "certificate_notbefore": "1540982494000",
        "certificate_subject_dn": "C=US, CN=APSP:99335a61-7acc-42a0-87fd-f564d36e2166, UID=com.apple.mgmt.External.99335a61-7acc-42a0-87fd-f564d36e2166",
        "certificate_file_name": "MDM__Zylker_Inc_Certificate__5_.pem",
        "certificate_serial_number": "7565549844070638883"
      },
      {
        "days_to_expire": "7305",
        "certificate_name": "ZylkerCA",
        "is_identity": false,
        "certificate_notafter": "2174000445000",
        "certificate_org": "Zylker Inc",
        "issuer_name": "ZylkerCA",
        "certificate_id": "9007199254741007",
        "certificate_issuer_dn": "CN=ZylkerCA,O=Zylker Inc,OU=Zylker IT,ST=CA,C=US",
        "issuer_org": "Zylker Inc",
        "certificate_notbefore": "1542848445000",
        "certificate_subject_dn": "CN=ZylkerCA, O=Zylker Inc, OU=Zylker IT, ST=CA, C=US",
        "certificate_file_name": "cert",
        "certificate_serial_number": "2751265269709804611"
      }
    ],
    "paging": {
      "next": "https://server/api/v1/mdm/profiles/certificates?skip-token=Mzo3OjE6MTU0Mjg4NjY0NDEyNw%3D%3D",
      "previous": "https://server/api/v1/mdm/profiles/certificates?skip-token=MzoxOjI6MTU0Mjg4NjcyODY1MA%3D%3D"
    }
  }

▼ Show full

No certificates found matching the query

Copied!

  {
    "metadata": {
      "total_record_count": "0"
    },
    "certificates": [],
    "paging": {}
  }

▼ Show full

Duration: 1 minute | Threshold: 120 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.