quaxar-asm-certificate
Get the detail of a single certificate by certificate ID from the S2W Quaxar ASM service.
Syntax
Options
- id=STRING
- Required. Certificate unique ID to look up. Use the
certificate_idoutput value ofquaxar-asm-certificates. - profile=STRING
- Optional. QUAXAR connect profile code. If omitted, an available profile is used automatically.
- orgs=STRING
- Optional. Comma-separated customer organization names.
- pretty=BOOL
- Optional. Set t to enable pretty print with line breaks (default: f).
Output fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | string | Connect profile | Profile name of QUAXAR |
| certificate_id | string | Certificate ID | Certificate unique ID |
| hidden | boolean | Hidden | Certificate hidden or not |
| serial | string | Serial | Certificate serial number |
| detected | date | Detected | Certificate detection time |
| valid_since | date | Valid since | Certificate issue time |
| valid_until | date | Valid until | Certificate expiration time |
| signature_algorithm | string | Signature algorithm | Certificate signature algorithm |
| public_key | string | Public key | Certificate public key |
| organization | string | Organization | Certificate organization |
| altnames | string | Alt names | Newline-separated certificate alt names |
| status | string | Status | VALID, INVALID, SOON_EXPIRED or EXPIRED |
| issuer | string | Issuer | Certificate issuer |
| subject | string | Subject | Certificate subject |
Error codes
Parsing errors
| Error message | Cause | Resolution |
|---|---|---|
| Specify id option please. | Missing or empty id option | Specify the target certificate_id in id |
| Specify valid Quaxar profile. | Invalid profile in the profile option | Specify a valid Quaxar connect profile code |
| No available Quaxar profile found. | No Quaxar connect profile registered | Register a Quaxar connect profile first |
Runtime errors
| Error message | Cause | Resolution |
|---|---|---|
| quaxar asm api error: status=..., message=... | ASM API returned an error state | Check id validity, profile permission and service |
Description
quaxar-asm-certificate is a source command that looks up the detail of a single certificate ID. It returns detailed fields not provided by the list command, such as serial, issue/expiration time, signature algorithm, public key, and subject alternative names (SAN). The certificate ID comes from the certificate_id output value of the quaxar-asm-certificates command.
Examples
Example: Inspect signature and validity detail of a certificate
Situation: You want to inspect the signature algorithm and subject alternative names (SAN) of a soon-to-expire certificate found in the list.
Expected result:
| certificate_id | status | signature_algorithm | valid_until | altnames |
|---|---|---|---|---|
| cert-1a2b3c | SOON_EXPIRED | SHA256-RSA | 2026-08-10 00:00:00 | example.com |
Interpretation: The detail fields of a single certificate are returned as one row. Use altnames to check the domain scope this certificate protects and signature_algorithm to review the cryptographic strength.