---
updatedAt: 2026-06-15T13:51:20.000Z
agentTools:
  siteIndex: https://developer.jamf.com/llms.txt
  projectIndex: https://developer.jamf.com/jamf-pro/llms.txt
---

# Returns X.509 details of the active Certificate Authority (CA)

Returns X.509 details of the active Certificate Authority (CA)

# OpenAPI definition

```json
{
  "openapi": "3.0.1",
  "info": {
    "title": "Jamf Pro API",
    "termsOfService": "https://www.jamf.com/developer-resources/api-license-agreement",
    "version": "11.32.0"
  },
  "servers": [
    {
      "url": "https://yourServer.jamfcloud.com/api"
    }
  ],
  "x-readme": {
    "samples-languages": [
      "curl",
      "swift",
      "ruby",
      "python"
    ],
    "explorer-enabled": false
  },
  "security": [
    {
      "Bearer": []
    },
    {
      "ApiClient": []
    },
    {
      "BasicAuth": [
        "/v1/auth/token"
      ]
    }
  ],
  "paths": {
    "/v1/pki/certificate-authority/active": {
      "get": {
        "tags": [
          "certificate-authority"
        ],
        "summary": "Returns X.509 details of the active Certificate Authority (CA)",
        "description": "Returns X.509 details of the active Certificate Authority (CA)",
        "responses": {
          "200": {
            "description": "Successful response displays the details of the active Certificate Authority (CA)",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/CertificateRecord"
                }
              }
            }
          }
        },
        "x-authentication-required": false
      }
    }
  },
  "components": {
    "schemas": {
      "CertificateRecord": {
        "type": "object",
        "properties": {
          "subjectX500Principal": {
            "type": "string",
            "example": "CN=Jamf JSS Built-in Certificate Authority"
          },
          "issuerX500Principal": {
            "type": "string",
            "example": "CN=Jamf JSS Built-in Certificate Authority"
          },
          "serialNumber": {
            "type": "string",
            "example": "00bc43bea0"
          },
          "version": {
            "type": "integer",
            "example": 3
          },
          "notAfter": {
            "type": "integer",
            "example": 1927739379
          },
          "notBefore": {
            "type": "integer",
            "example": 1612120179
          },
          "signature": {
            "$ref": "#/components/schemas/Signature"
          },
          "keyUsage": {
            "type": "array",
            "example": [
              "digitalSignature",
              "keyEncipherment",
              "keyCertSign",
              "cRLSign"
            ],
            "items": {
              "type": "string"
            }
          },
          "keyUsageExtended": {
            "type": "array",
            "example": [
              "1.3.6.1.5.5.7.3.1"
            ],
            "items": {
              "type": "string"
            }
          },
          "sha1Fingerprint": {
            "type": "string",
            "example": "448a7cc4d899d6a1821258133c24c023a5f558d9"
          },
          "sha256Fingerprint": {
            "type": "string",
            "example": "660958e14891c67491822687d9ac0e3574562664458111ad875b680995ca472b"
          }
        }
      },
      "Signature": {
        "type": "object",
        "properties": {
          "algorithm": {
            "type": "string",
            "example": "SHA256withRSA"
          },
          "algorithmOid": {
            "type": "string",
            "example": "1.2.840.113549.1.1.11"
          },
          "value": {
            "type": "string",
            "example": "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"
          }
        }
      }
    },
    "securitySchemes": {
      "Bearer": {
        "type": "http",
        "scheme": "bearer",
        "bearerFormat": "JWT"
      },
      "BasicAuth": {
        "type": "http",
        "description": "Basic auth is used only for obtaining bearer tokens from the /v1/auth/token endpoint",
        "scheme": "basic"
      },
      "ApiClient": {
        "type": "oauth2",
        "description": "Jamf Pro API Roles and Clients provide a client ID and secret for obtaining access tokens using the OAuth2 client_credentials grant type",
        "flows": {
          "clientCredentials": {
            "tokenUrl": "/api/v1/oauth/token",
            "scopes": {}
          }
        }
      }
    }
  }
}
```