Appendix F - List CertView Certificate (v2) API Details with Description

This appendix lists the fields in the Includes parameter of the v2 API responses, along with their descriptions.

Includes Parameter API Version Support Sample fields Description
ASSET_INTERFACES v2 {
  "assetInterfaces": [
    {
      "hostname": "c5.f5.b19e.ip4.static.sl-reverse.com",
      "address": "xxx.xxx.xxx.xxx"
    }
  ]
}
This parameter includes the list of network interfaces for each asset, such as hostnames and IP addresses
VULNERABILITIES v2 {
  "vulnerabilities": [
    {
      "title": "SSL Server Information Retrieval",
      "severity": 1,
      "qid": 38116
    }
  ]
}
This parameter includes the list of detected vulnerabilities for each host instance, along with their related fields such as title, severity, and QID
SSL_PROTOCOLS v2 {
  "sslProtocols": [
    "TLSv1.2",
    "TLSv1.3"
  ]
}
This parameter includes the list of SSL/TLS protocols supported by each host instance in the response
CIPHER_SUITES v2 {
  "cipherSuites": [
    {
      "name": "AES128-SHA",
      "category": "INSECURE"
    }
  ]
}
This parameter includes the list of SSL/TLS cipher suites supported by each host instance along with their related fields such as name and category
ASSET_TAGS v2 {
  "tags": [
    {
      "name": "Internet Facing Assets",
      "uuid": "ddc5ee2b-44e5-45e8-9c80-19992abd4d41"
    }
  ]
}
This parameter includes the list of tags associated with each assets, such as tag name and UUID
EXTENSIVE_CERTIFICATE_INFO v2

{
  "keyUsage": [
    "Digital signature"
  ],
  "enhancedKeyUsage": [
    "1.x.x.x.x.x.x.x.1",
    "1.x.x.x.x.x.x.x.2"
  ],
  "subjectKeyIdentifier": "b6c75b1939d7afcc24cd9817a48850dd267971f4",
  "authKeyIdentifier": "8f0d13a2f62e7ed1506c3318385d598e237291ca",
  "subjectAlternativeNames": {
    "DNS Name": [
      "test.openquantumsafe.org"
    ],
    "IP Address": null
  }
}

This parameter includes a detailed certificate information such as key usage, enhanced key usage subject key identifier, authKeyIdentifier, and subjectAlternativeNames
CERT_REVOCATION_INFO v2.2 {
  "revocationDetails": {
    "ocspUris": null,
    "crlUris": [
      "http://e8.c.lencr.org/128.crl"
    ]
  }
}
This parameter includes the certificate details such as revocation status such as CRL distribution points and OCSP URIs
 PQC_SUPPORTED_ALGORITHMS v2.3 {
  "pqcSupportedAlgorithms": [
    "MLKEM1024",
    "MLKEM512",
    "MLKEM768",
    "SecP256r1MLKEM768",
    "SecP384r1MLKEM1024",
    "X25519MLKEM768"
  ]
}
This parameter includes the list of PQC-supported algorithms, such as MLKEM1024, MLKEM512, MLKEM768,, SecP256r1MLKEM768, SecP384r1MLKEM1024, X25519MLKEM768