---
title: "Certificate information relating to an IP address"
slug: "get-certificate-information-relating-to-an-ip-address"
description: "Silent Push allows you to search through data from our daily scans of the Internet's IPv4 range to obtain information on certificates."
tags: ["Certificates", "IP queries", "IPv4"]
updated: 2025-12-31T17:01:15Z
published: 2025-12-31T17:01:15Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.silentpush.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Certificate information relating to an IP address

Certificates are used in authentication to establish secure connections between devices, such as web browsers and servers, or to sign files or emails digitally.

In the context of threat intelligence, certificate information is useful in several ways:

1. Identifying malicious websites and phishing attacks. Many attackers use fake or stolen certificates to make their websites appear legitimate, but analyzing certificate information helps to detect these fraudulent sites.
2. Tracking the activities of threat actors. By analyzing certificate information, security analysts can identify patterns and connections between different attacks, as well as the infrastructure and resources used by specific threat actors.
3. Verifying the authenticity of digital communications. By using certificate information to verify a sender's identity or a file's authenticity, security teams can reduce the risk of falling victim to phishing, malware, or other attacks.

Silent Push allows you to search through data from our daily scans of the Internet's IPv4 range to obtain information on a broad range of elements related to individual certificates.

## Get Certificate Information

1. From the left navigation menu, select **Advanced Query Builder > IPv4 Queries > Scan Data - Certificates Usage**.
2. Specify an IP address and (optional) netmask for a range.
  - (Optional) Enter a certificate fingerprint (fingerprint_sha1).
  - (Optional) Specify a domain (wildcards supported).
  - (Optional) Select **expired_certs_only** for expired certificates.
  - Optional) Set a **window** (days) for recent scan results.
  - (Optional) Limit or skip results.
3. Click **Search**.

## **Save Query**

1. Specify query parameters.
2. Click **Save Query**.
3. Provide a **Name** and **Description** for context.
4. Click **Save**. The query appears in [**Private Queries**](https://help.silentpush.com/docs/private-queries).