# Get Certificate

> Certificate status, prerequisites, final check and history

**Endpoint:** `GET /v1/applications/{application_id}/certificate`  
**Access:** Free (guest token or account)  
**MCP tool:** `get_certificate`

## cURL example

```bash
curl "https://api.verifiedinbox.ai/v1/applications/0192a5e0-1234-7000-8000-000000000001/certificate" \
  -H "VI-Guest-Token: vi_guest_YOUR_TOKEN"
```

## Parameters

| Parameter | Type | Description |
|---|---|---|
| `application_id` (path, required) | `string (uuid)` | Application id. |
| `VI-Environment` (header) | `string` | `live` (default) or `test`. Used for anonymous callers and OAuth access tokens; API keys and web sessions carry their own environment. |

## Responses

### 200 OK

Certificate.

```json
{
  "certificate": {
    "created_at": "2026-10-31T12:00:00Z",
    "customer_actions": [],
    "days_remaining": 1,
    "id": "0192a5e0-1234-7000-8000-000000000001",
    "issued_at": "2026-10-31T12:00:00Z",
    "issuer": "string",
    "issuer_mode": "string",
    "issuer_order_id": "0192a5e0-1234-7000-8000-000000000001",
    "kind": "vmc",
    "not_after": "2026-10-31T12:00:00Z",
    "not_before": "2026-10-31T12:00:00Z",
    "pem_url": "https://verifiedinbox.ai/verify/0192a5e0-1234-7000-8000-000000000001/domain",
    "prerequisites": [],
    "reissue_of": "0192a5e0-1234-7000-8000-000000000001",
    "rejected_at": "2026-10-31T12:00:00Z",
    "rejection_reason": "string",
    "renewal_of": "0192a5e0-1234-7000-8000-000000000001",
    "renewal_starts_on": "2026-10-31",
    "revocation_reason": "string",
    "revoked_at": "2026-10-31T12:00:00Z",
    "serial": "string",
    "status": "waiting_prerequisites",
    "status_detail": "string",
    "submitted_at": "2026-10-31T12:00:00Z",
    "test_mode": true,
    "timeline": [],
    "updated_at": "2026-10-31T12:00:00Z"
  },
  "final_check": {
    "created_at": "2026-10-31T12:00:00Z",
    "id": "0192a5e0-1234-7000-8000-000000000001",
    "ok": true,
    "results": [],
    "trigger": "submission"
  },
  "history": [
    {
      "created_at": "2026-10-31T12:00:00Z",
      "customer_actions": [],
      "days_remaining": 1,
      "id": "0192a5e0-1234-7000-8000-000000000001",
      "issued_at": "2026-10-31T12:00:00Z",
      "issuer": "string",
      "issuer_mode": "string",
      "issuer_order_id": "0192a5e0-1234-7000-8000-000000000001",
      "kind": "vmc",
      "not_after": "2026-10-31T12:00:00Z",
      "not_before": "2026-10-31T12:00:00Z",
      "pem_url": "https://verifiedinbox.ai/verify/0192a5e0-1234-7000-8000-000000000001/domain",
      "prerequisites": [],
      "reissue_of": "0192a5e0-1234-7000-8000-000000000001",
      "rejected_at": "2026-10-31T12:00:00Z",
      "rejection_reason": "string",
      "renewal_of": "0192a5e0-1234-7000-8000-000000000001",
      "renewal_starts_on": "2026-10-31",
      "revocation_reason": "string",
      "revoked_at": "2026-10-31T12:00:00Z",
      "serial": "string",
      "status": "waiting_prerequisites",
      "status_detail": "string",
      "submitted_at": "2026-10-31T12:00:00Z",
      "test_mode": true,
      "timeline": [],
      "updated_at": "2026-10-31T12:00:00Z"
    }
  ],
  "prerequisites": [
    {
      "id": "paid",
      "label": "string",
      "met": true,
      "step": "domain"
    }
  ],
  "prerequisites_met": true
}
```

### 400 (invalid_request)

`invalid_request` — the request is malformed.

```json
{
  "error": {
    "code": "invalid_request",
    "message": "Please provide a valid domain name."
  }
}
```

### 401 (unauthenticated)

`unauthenticated` — sign in / send a valid credential. `next_action.kind = sign_in`.

```json
{
  "error": {
    "code": "unauthenticated",
    "message": "Sign in or provide an API key to continue.",
    "next_action": {
      "kind": "sign_in",
      "title": "Sign in or create an account",
      "url": "/login"
    }
  }
}
```

### 404 (not_found)

`not_found` — doesn't exist or isn't accessible to you (never 403).

```json
{
  "error": {
    "code": "not_found",
    "message": "We couldn't find that resource."
  }
}
```

### 429 (rate_limited)

`rate_limited` — retry after `Retry-After` seconds (`details.retry_after_seconds`). `limit_reached` — a quota is used up; `details.limit` names it and `next_action` offers support.

```json
{
  "error": {
    "code": "rate_limited",
    "message": "Too many requests. Please wait a moment and try again."
  }
}
```