API for Cert Verification

[AngeloMileto]

I am trying to setup a certificate database for our company to be able to track the employees' certs and was wondering if there is an API that we could use to 1: Verify cert based on the number the employee provides and 2: collect relevant data like issue/expire date.

Thanks!

[Caute_cautim]

Hi @AngeloMileto Have you looked at CyberArk?

https://www.cyberark.com/47-day-tls-certificates/?utm_source=google&utm_medium=paid_search&utm_term=...

What you really need is a Certificate Lifecycle Management service examples include AppViewX, Key Factor, trying to do this manually or with an ITSM such as ServiceNow - you need automation to deal with this mandate.

Regards

Caute_Cautim

[AngeloMileto]

I appreciate the reply Caute but 1st, do you think I would actually click on any link posted by someone I don't know? But more importantly, I'm not talking about SSL certs but ISC2 certs.

[Caute_cautim]

Hi @AngeloMileto 

You were not very explicit on your request, any how SSL certificates are redundant it is now TLS certificates.

APIs use digital certificates to secure the communication channel.

There is also a technique to validate the domain, before clicking on a link by hovering over the link.

CyberArk is a well known security organisation, which was purchased by Palo Alto, which is definitely a well known security organisation.

I am sure any electronic communication with ISC2 would be conducted over a secure channel, and any certificate could be verified via a digital signature.

Thanks for your comments

Regards

Caute_Cautim

[AngeloMileto]

Thanks again Caute but I did actually find it. There is a verification URL you can provide a certificate number and last name and it will provide the currency of that certificate. my.isc2.org/s/MemberVerification.

[nkeaton]

@AngeloMileto I am glad that you found that. I thought that you were looking for something more automated but definitely works. Not sure why anyone thought were talking about anything but ISC2 certifications, but we do over analyze sometimes. I thought that you were very clear.

[mrsimon0007]

It depends on the certification provider. Most vendors (like Microsoft, Cisco, AWS, etc.) don’t offer a public API to verify certificates by number. Verification is usually done through their official verification portal, and some provide APIs only to approved partners. You’ll need to check directly with each certification body to see if they offer API access. Otherwise, employees may need to share official verification links or digital badges instead.

[nkeaton]

@mrsimon0007 They clarified that they were interested in ISC2 certifications. You are definitely correct on the others.