Security Performance Management
Continuous Monitoring
Cyber Insurance
National Cybersecurity

Articles in this section

See more

GET: TLS/SSL Certificates Finding Details

Avatar
Ingrid
Follow
Publication Date – March 31, 2023

⇤ Findings

https://api.bitsighttech.com/ratings/v1/companies/company_guid/findings?risk_vector=ssl_certificates

Get an organization’s TLS/SSL Certificates finding details.

Parameters

For details specific to TLS/SSL Certificates, use the ?risk_vector=ssl_certificates parameter. Other query parameters are listed in GET: Finding Details.

Example Request

curl https://api.bitsighttech.com/ratings/v1/companies/a940bb61-33c4-42c9-9231-c8194c305db3/findings?risk_vector=ssl_certificates -u api_token:

Example Response

{
  "links":{
    "next":"https://api.bitsighttech.com/ratings/v1/companies/a940bb61-33c4-42c9-9231-c8194c305db3/findings?limit=100&offset=100&risk_vector=ssl_certificates",
    "previous":null
  },
  "count":1235,
  "results":[
    {
      "temporary_id":"A1Aa11AAaa11a111aa111aa11a111a11aa11a111aa",
      "affects_rating":true,
      "assets":[ ],
      "details":{
        "cvss":{
          "base":[ ]
        },
        "check_pass":"",
        "diligence_annotations":{
          "sampleName":"11.1.111.111:443",
          "certchain":[
            {
              "dnsName":[ ],
              "endDate":"2031-11-10 00:00:00",
              "issuerName":"C=US,O=CertIssuer Inc,OU=www.certissuer.com,CN=CertIssuer Global Root CA",
              "keyAlgorithm":"RSA",
              "keyLength":2048,
              "serialNumber":"11111111111111111111111111111111111111",
              "signatureAlgorithm":"SHA1WITHRSA",
              "startDate":"2006-11-10 00:00:00",
              "subjectName":"C=US,O=CertIssuer Inc,OU=www.certissuer.com,CN=CertIssuer Global Root CA"
            }
          ],
          "previouslyObserved":{
            "2023-03-19":[
              "222.22.22.222:443"
            ]
          }
        },
        "final_location":"https://333.33.333.33/",
        "geo_ip_location":"A1",
        "country":"Demo Country 1",
        "grade":"GOOD",
        "observed_ips":[
          "44.44.444.44:443"
        ],
        "remediations":[ ],
        "sample_timestamp":"2023-03-28T23:35:12Z",
        "vulnerabilities":[ ],
        "dest_port":0,
        "rollup_end_date":"2023-03-28",
        "rollup_start_date":"2022-10-08",
        "searchable_details":"12312312312312312312312312312312312312,32132132132132132132132132132132132121,5555555555555555555555555555555555555,C=GB,ST=Greater Manchester,L=Salford,O=Sectigo Limited,CN=Sectigo RSA Extended Validation Secure Server CA,C=US,ST=New Jersey,L=Jersey City,O=The USERTRUST Network,CN=USERTrust RSA Certification Authority,C=US,ST=New Jersey,L=Jersey City,O=The USERTRUST Network,CN=USERTrust RSA Certification Authority"
      },
      "evidence_key":"example.site.com",
      "first_seen":"2022-10-08",
      "last_seen":"2023-03-28",
      "related_findings":[ ],
      "risk_category":"Diligence",
      "risk_vector":"ssl_certificates",
      "risk_vector_label":"SSL Certificates",
      "rolledup_observation_id":"bB2bBBBBBbBBbb2BbbBbBb==",
      "severity":1.0,
      "severity_category":"minor",
      "tags":[
        "Guest WiFi"
      ],
      "remediation_history":{
        "last_requested_refresh_date":null,
        "last_refresh_status_date":null,
        "last_refresh_status_label":null,
        "last_refresh_reason_code":null
      },
      "asset_overrides":[ ],
      "duration":null,
      "comments":null,
      "remaining_decay":58,
      "remediated":null
    }
  ]
}

Response Attributes

Field Description 
links
Object		 Navigation for multiple pages of results. See pagination.
  
next
String		 The URL for navigating to the next page of results. 
previous
String		 The URL for navigating to the previous page of results. 
count
Integer		 The number of findings. 
results
Array		 Finding objects.
  Object A finding.
  
temporary_id
String		 A temporary identifier for this finding. 
affects_rating
Boolean		 true = This finding has an impact on the risk vector letter grade. 
assets
Array		 Assets relating to this finding. 
details
Object		 Finding details.
  
cvss
Object		 If the finding has an associated vulnerability, the CVSS score is listed below.
  
base
Array		 CVSS scores of vulnerabilities associated with this finding. 
check_pass
String		 For internal Bitsight use. 
diligence_annotations
Object		 Diligence finding details.
  
sampleName
String		 The IP/CIDR range. 
certchain
Array		 Certificate chain details.
  Object A certificate in the chain.
  
dnsName
Array		 Domains within this chain. 
endDate
String [YYYY-MM-DD HH:MM:SS]		 The date when this certificate expires. 
issuerName
String		 The distinguished name of the certificate issuer, made up of attribute assertion values. 
keyAlgorithm
String		 The algorithm used to encrypt and decrypt messages. 
keyLength
Integer		 The bit strength of this key. See the recommended TLS/SSL key length. 
serialNumber
Integer		 The serial number of this certificate. 
signatureAlgorithm
String		 The signing algorithm used in this certificate. 
startDate
String [YYYY-MM-DD HH:MM:SS]		 The date when this certificate started. 
subjectName
String		 The distinguished name of the owner of the certificate, made up of attribute assertion values. 
previouslyObserved
Object		 Previously observed IPs/CIDRs on particular dates.
  Date [YYYY-MM-DD] Array IP/CIDRs on the displayed date. 
final_location
String		 The URL. 
geo_ip_location
String		 A 2-letter ISO country code indicating the finding’s country of origin. 
country
String		 The finding’s country of origin. 
grade
String		 The finding grade. 
observed_ips
Array		 Observed IP addresses. 
remediations
Array		 Information about the finding and instructions to remediate it. 
sample_timestamp
String [YYYY-MM-DDTHH:MM:SSZ]		 The date and time when this finding was observed. 
vulnerabilities
Array		 Vulnerability details. 
dest_port
Integer		 The destination port number. 
rollup_end_date
String [YYYY-MM-DD]		 The date when this finding was last observed. 
rollup_start_date
String [YYYY-MM-DD]		 The date when this finding was first observed. 
searchable_details
String		 Certificate details. 
evidence_key
String		 The asset attributed to the finding. 
first_seen
String [YYYY-MM-DD]		 The date when this observation was first seen. 
last_seen
String [YYYY-MM-DD]		 The date when this observation was last seen. 
related_findings
Array		 Related findings and their details. 
risk_category
String		 The risk category of this finding. 
risk_vector
String		 The slug name of this risk vector. 
risk_vector_label
String		 The display name of this risk vector. 
rolledup_observation_id
String		 The observation’s identifier. 
severity
Decimal		 The finding severity, which is the measured risk that this finding introduces. 
severity_category
String		 The finding severity slug name. 
tags
Array		 Infrastructure tags that identify this asset. 
remediation_history
Object		 The finding’s remediation and refresh history.
  
last_requested_refresh_date
String [YYYY-MM-DD]		 The date when a finding refresh that included this finding was last requested. 
last_refresh_status_date
String [YYYY-MM-DD]		 The date when this finding’s remediation status was last refreshed. 
last_refresh_status_label
String [YYYY-MM-DD]		 The current refresh status of this finding. 
last_refresh_reason_code
String [YYYY-MM-DD]		 The current remediation status of this finding. 
asset_overrides
Array		 User-assigned asset importance details. 
duration
Integer		 Not applicable to TLS/SSL Certificate findings. 
comments
String		 Finding comments. 
remaining_decay
Integer		 The remaining finding lifetime. 
remediated
Null		  

Related articles