跳到主要内容

证书查询接口

API 查询证书状态。

请求参数​

  • service_id - 证书ID

响应​

HTTP/1.1 200 OK

Content-Type: application/json
Content-Length: 1234

{
  "success": true,
  "message": "OK",
  "data": {
    "service_id": "o91bZ", // 证书编号，请对接方保存此值到业务数据库（后面获取状态、尝试验证域名、更改验证方式接口均需要此参数来表示请求的哪张证书）
    "caid": "358174513", // CA订单号

    /**
      - 订单状态 `status`:
        - `issued`: 已签发, 只有已签发才会返回 `cert_pem` 和 `ca_pem`
        - `pending`: 等待中
        - `expired`: 已过期
        - `revoked`: 已吊销
        - `refunded`: 已退款
    */
    "status": "pending",
    "cert_pem": null, // 最后一次签发证书的PEM
    "ca_pem": null, // 最后一次签发证书链
    "not_before": null, // 不早于
    "not_after": null, // 不晚于
    "service_expires_at": "2025-12-31 23:59:59", // 订单服务到期时间
    "dcv": {
      // DCV验证信息
      "*.example.com": {
        "type": "dns", // 验证类型，可能为 `dns`、`http`、`https`、`email`
        "subdomain": "*", // 子域名
        "topleveldomain": "example.com", // 主域名
        "status": "valid", // 域名验证状态，可能为 `pending`(验证中，需要用户完成解析、文件上传或Email校验)、`valid`(已验证)、`caa-failure`(CAA校验失败)、`dnssec-failure`(DNSSEC安全验证失败)
        "dns": {
          // DNS验证信息，如果验证类型为`dns`，则这里会出现`dns`；如果验证类型为`email`，则这里会出现`email`；如果验证类型为`http`或`https`，则这里会出现`http`或`https`。
          "type": "cname", // DNS 类型
          "hostname": "_310dcbbf4cce62f762a2aaa148d556bd", // DNS 主机名
          "fullname": "_310dcbbf4cce62f762a2aaa148d556bd.example.com", // 需要 DNS 解析的完整域名
          "value": "698d51a19d8a121ce581499d7b701668.bcbe3365e6ac95ea2c0343a2395834dd.20221122.comodoca.com" // DNS 解析值
        }
      },
      "example2.com": {
        "type": "http",
        "subdomain": "",
        "topleveldomain": "example2.com",
        "status": "pending",
        "http": {
          // HTTP验证信息，如果验证类型为`http`，则这里会出现`http`。
          "filename": "310dcbbf4cce62f762a2aaa148d556bd.txt", // HTTP文件名
          "filecontent": "698d51a19d8a121ce581499d7b70166820221122\n20221122\ncomodoca.com", // HTTP文件内容
          "filepath": ".well-known/pki-validation/", // HTTP文件路径
          "filefullpath": ".well-known/pki-validation/310dcbbf4cce62f762a2aaa148d556bd.txt", // HTTP文件完整路径
          "url": "http://example2.com/.well-known/pki-validation/310dcbbf4cce62f762a2aaa148d556bd.txt" // HTTP文件URL
        }
      },
      "example3.com": {
        "type": "https",
        "subdomain": "",
        "topleveldomain": "example3.com",
        "status": "pending",
        "http": {
          // HTTPS验证信息，如果验证类型为`https`，则这里会出现`https`。
          "filename": "310dcbbf4cce62f762a2aaa148d556bd.txt", // HTTPS文件名
          "filecontent": "698d51a19d8a121ce581499d7b70166820221122\n20221122\ncomodoca.com", // HTTPS文件内容
          "filepath": ".well-known/pki-validation/", // HTTPS文件路径
          "filefullpath": ".well-known/pki-validation/310dcbbf4cce62f762a2aaa148d556bd.txt", // HTTPS文件完整路径
          "url": "https://example3.com/.well-known/pki-validation/310dcbbf4cce62f762a2aaa148d556bd.txt" // HTTPS文件URL
        }
      },
      "sub.example4.com": {
        "type": "email",
        "subdomain": "email",
        "topleveldomain": "example4.com",
        "status": "pending",
        "email": {
          // Email验证信息，如果验证类型为`email`，则这里会出现`email`。
          "address": "admin@example4.com", // Email地址
          "available": [
            // 可用的Email地址
            "admin@example4.com",
            "administrator@example4.com",
            "webmaster@example4.com",
            "postmaster@example4.com",
            "hostmaster@example4.com",
            "admin@email.example4.com",
            "administrator@sub.example4.com",
            "webmaster@sub.example4.com",
            "postmaster@sub.example4.com",
            "hostmaster@sub.example4.com"
          ]
        }
      }
    }
  }
}