# Certificate Transparency on Onekey

> 2 endpoints for Certificate Transparency (2 stable, 0 beta), 5 credits each. Category: Web tools. One key, one JSON shape.

Base URL: https://api.onekey.dev
Auth: header `x-api-key: <key>`. Call shape: `GET /v1/{platform}/{endpoint}?{params}`.
Every response is `{success, data, metadata, error}`; check `success` first. Cost is in `metadata.credits_charged`. Free when served from cache (0.2 credit for a cached response over 100 KB). Failed and not-found calls are refunded.
Status: stable = verified against the live source; beta = not yet verified, fields may be missing.

Page: https://onekey.dev/platforms/ct
Reference (Markdown): https://onekey.dev/docs/api/ct.md
All docs: https://onekey.dev/llms.txt

## Canonical fields returned

Unified-schema fields (same names on every platform), with how many of the 2 mapped Certificate Transparency endpoints return each:

- `entity.id` (string): 2
- `entity.name` (string): 2
- plus 5 platform-specific fields under `ext.`

## Endpoints

### ct.certificates

Certificate Transparency: unexpired certificates issued for a domain (crt.sh).
- Price: 5 credits per fresh call. Status: stable. Returns: a list.
- Request: `GET https://api.onekey.dev/v1/ct/certificates?domain=example.com` with header `x-api-key: YOUR_API_KEY`
- Parameters:
  - `domain` (string, required): Domain name
- Fields returned: `entity.id`, `entity.name`, `ext.names`, `ext.issuer`, `ext.notBefore`, `ext.notAfter`, `ext.serialNumber`
- Reference: https://onekey.dev/docs/api/ct/certificates.md

### ct.subdomains

Certificate Transparency subdomain discovery: unexpired certificates for *.domain (crt.sh).
- Price: 5 credits per fresh call. Status: stable. Returns: a list.
- Request: `GET https://api.onekey.dev/v1/ct/subdomains?domain=example.com` with header `x-api-key: YOUR_API_KEY`
- Parameters:
  - `domain` (string, required): Registrable domain
- Fields returned: `entity.id`, `entity.name`, `ext.names`, `ext.issuer`, `ext.notBefore`, `ext.notAfter`, `ext.serialNumber`
- Reference: https://onekey.dev/docs/api/ct/subdomains.md

## Sample request

```bash
curl "https://api.onekey.dev/v1/ct/certificates?domain=example.com" \
  -H "x-api-key: YOUR_API_KEY"
```