Search Certificates

venafi_cloud.search_certificates

ActionBusiness appsconnection required

Calls the Venafi TLS Protect Cloud API with the connection's credentials.

Find certificates with a Venafi search expression, such as expiring soon.

Ask about Venafi TLS Protect Cloud All Venafi TLS Protect Cloud nodes Provider API docs ↗

Connection

Required: Yes — the node will not save without one
Auth type: API key
Providers: Venafi TLS Protect Cloud
Secret shape: the API key, or {"api_key": "…"}
Config it needs: region, base_url
Resolved by: config.connection_id, else node.connection_id

Configuration

4 fields, 1 required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.

Field	Type	Required	Default	Constraints	Example
expression The search expression: an operator and its operands, each naming a certificate field, an operator and a value.	object	Yes	—	—	{"operands":[{"field":"validityEnd","operator":"LTE","value":"2026-12-31T00:00:00.000Z"}],"operator":"AND"}
ordering How to sort the results: a direction of ASC or DESC and a field name.	object	No	—	—	{"orders":[{"direction":"DESC","field":"validityEnd"}]}
page_number Which page of results to return; Venafi counts from zero.	number	No	—	≥ 0	0
page_size How many certificates to return in one page.	number	No	—	≥ 1	25

Example configuration

Every value below is the contract’s own example or default — nothing invented.

{
  "expression": {
    "operands": [
      {
        "field": "validityEnd",
        "operator": "LTE",
        "value": "2026-12-31T00:00:00.000Z"
      }
    ],
    "operator": "AND"
  },
  "ordering": {
    "orders": [
      {
        "direction": "DESC",
        "field": "validityEnd"
      }
    ]
  },
  "page_number": 0,
  "page_size": 25
}

Output

One shape.

result

Field	Type	Example
certificates One entry per matching certificate on this page.	array	—
certificates[].id The certificate id.	string	—
certificates[].subjectCN The subject common name.	string	—
certificates[].validityEnd When the certificate expires.	string	—
certificates[].certificateStatus ACTIVE, RETIRED or DELETED.	string	—
returned How many certificates this page carried.	number	—
count How many certificates matched in total.	number	—

{
  "certificates": [
    {
      "certificateStatus": "",
      "id": "",
      "subjectCN": "",
      "validityEnd": ""
    }
  ],
  "count": 0,
  "returned": 0
}

Related Venafi TLS Protect Cloud nodes

See Search Certificates run in a workflow.

In a technical demo we add the Venafi TLS Protect Cloud connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.

Book a technical demo Talk to sales