GET – Certificate properties
Use the GET method to retrieve properties in Certificate resource for Redfish service.
Request URL
GET https://<BMC_IPADDR>/redfish/v1/Managers/1/NetworkProtocol/HTTPS/Certificates/{id}
GET https://<BMC_IPADDR>/redfish/v1/Managers/1/KeyManagement/KMIPCertificates/{Id}
GET https://<BMC_IPADDR>/redfish/v1/AccountService/LDAP/Certificates/{id}
GET https://<BMC_IPADDR>/redfish/v1/UpdateService/RemoteServerCertificates/{id}
GET https://<BMC_IPADDR>/redfish/v1/Systems/1/VirtualMedia/{VM_id}/Certificates/{id}
Request body
None
Response body
| Field | Type | Description | ||
|---|---|---|---|---|
| Id | String | The index of this certificate resource. | ||
| Name | String | The name of this certificate resource. | ||
| Description | String | This resource is used to represent the certificate for a Redfish implementation. | ||
| Actions | Object | Available for /redfish/v1/Managers/1/NetworkProtocol/HTTPS/Certificates/{id} | ||
| #Certificate.Rekey | Object | This action generates a new key-pair for a certificate and produces a certificate signing request. | ||
| KeyCurveId@Redfish.AllowableValues | Array | [“TPM_ECC_NIST_P384”]. | ||
| KeyPairAlgorithm@Redfish.AllowableValues | Array | [“TPM_ALG_ECDH”]. | ||
| #Certificate.Renew | Object | This action generates a certificate signing request by using the existing information and key-pair of the certificate. | ||
| CertificateString | String | The string for the certificate. | ||
| CertificateType | String | The format of the certificate. Only supports “PEM”. | ||
| Issuer | Object | The issuer of the certificate. | ||
| City | String | The city or locality of the organization of the entity. | ||
| CommonName | String | The fully qualified domain name of the entity. | ||
| Country | String | The country of the organization of the entity. | ||
| String | The email address of the contact within the organization of the entity. | |||
| Organization | String | The name of the organization of the entity. | ||
| OrganizationalUnit | String | The name of the unit or division of the organization of the entity. | ||
| State | String | The state, province, or region of the organization of the entity. | ||
| KeyUsage | Array | The usage of the key contained in the certificate. | ||
| KeyUsage[N] | String | “DigitalSignature” or “NonRepudiation” or “KeyEncipherment”. | ||
| Subject | Object | Expanded | ||
| City | String | The city or locality of the organization making the request. | ||
| CommonName | String | The fully qualified domain name of the entity. | ||
| Country | String | The country of the organization of the entity. | ||
| String | The e-mail address of the contact within the organization of the entity. | |||
| Organization | String | The name of the organization of the entity. | ||
| OrganizationalUnit | String | The name of the unit or division of the organization of the entity. | ||
| State | String | The state, province, or region of the organization of the entity. | ||
| ValidNotBefore | String | The date when the certificate becomes valid. | ||
| ValidNotAfter | String | The date when the certificate is no longer valid. | ||
Status code
| HTTP Status Code | Error Message ID | 
|---|---|
| 500 | InternalError | 
Example
The following example JSON response is returned:
{
    "ValidNotAfter": "2029-12-17T01:51:18+00:00",
    "@odata.id": "/redfish/v1/Managers/1/NetworkProtocol/HTTPS/Certificates/1",
    "KeyUsage": [
        "DigitalSignature",
        "NonRepudiation",
        "KeyEncipherment"
    ],
    "Id": "1",
    "Name": "Certificate_HTTPS",
    "CertificateType": "PEM",
    "@odata.etag": "\"eed23a10000d2d28c9cbd\"",
    "Subject": {
        "Organization": "Lenovo",
        "Country": "US",
        "City": "RTP",
        "CommonName": "XCC-7Z60-SN",
        "State": "NC"
    },
    "@odata.type": "#Certificate.v1_1_1.Certificate",
    "ValidNotBefore": "2019-12-20T01:51:18+00:00",
    "Issuer": {
        "Organization": "Lenovo",
        "Country": "US",
        "City": "RTP",
        "CommonName": "XCC-7Z60-SN",
        "State": "NC"
    },
    "CertificateString": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----",
    "Actions": {
        "#Certificate.Rekey": {
            "title": "Generate a new key pair for an existing certificate and produce a CSR.",
            "KeyCurveId@Redfish.AllowableValues": [
                "TPM_ECC_NIST_P384"
            ],
            "KeyPairAlgorithm@Redfish.AllowableValues": [
                "TPM_ALG_ECDH"
            ],
            "target": "/redfish/v1/Managers/1/NetworkProtocol/HTTPS/Certificates/1/Actions/Certificate.Rekey"
        },
        "#Certificate.Renew": {
            "title": "Generate a CSR using the existing information and key pair of the certificate.",
            "target": "/redfish/v1/Managers/1/NetworkProtocol/HTTPS/Certificates/1/Actions/Certificate.Renew"
        }
    },
    "Description": "This resource is used to represent the certificate for a Redfish implementation."
}