# Retrieve a certificate revocation (/docs/apis/management/trust-stores/FindCertificateRevocation)

`GET /truststores/pki/{trust_store_id}/revocations/{revocation_id}`

Retrieves detailed information for the specified certificate revocation (CRL) within the trust store.

Base URL: `https://{tenant}.{region}.monocloud.com/api`, where `{tenant}`, `{region}` (one of us, eu, in) come from your tenant. Authentication: send your Management API key in the `X-API-KEY` header.

## Parameters

- `trust_store_id` (path) (string, required) The unique identifier of the trust store.
- `revocation_id` (path) (string, required) The unique identifier of the certificate revocation.

## Response body

`200`, JSON. The certificate revocation was retrieved successfully

Returns `BaseCertificateRevocation | DeltaCertificateRevocation`.

- `BaseCertificateRevocation`
  - `id` (string, required) The unique identifier of the revocation entry.
  - `value` (string, required) The certificate revocation list (CRL) in PEM format.
  - `issuer_thumbprint` (string, required) The thumbprint of the CA certificate that issued this CRL.
  - `issued_at` (integer, required, date-time) Specifies the time at which the CRL was issued (in Epoch).
  - `next_update` (integer, date-time) Specifies the time at which the next CRL update is expected (in Epoch).
  - `creation_time` (integer, required, date-time) Specifies the time at which this revocation entry was created (in Epoch).
  - `crl_number` (integer, int32) The CRL number, as defined in the X.509 CRL extensions, used to identify the version or sequence of the certificate revocation list.
  - `type` (string, required) One of: `base`.
- `DeltaCertificateRevocation`
  - `id` (string, required) The unique identifier of the delta revocation entry.
  - `value` (string, required) The certificate revocation list (CRL) in PEM format.
  - `issuer_thumbprint` (string, required) The thumbprint of the CA certificate that issued this CRL.
  - `issued_at` (integer, required, date-time) Specifies the time at which the CRL was issued (in Epoch).
  - `next_update` (integer, date-time) Specifies the time at which the next CRL update is expected (in Epoch).
  - `creation_time` (integer, required, date-time) Specifies the time at which this revocation entry was created (in Epoch).
  - `crl_number` (integer, required, int32) The base CRL number, as defined in the X.509 CRL extensions, identifying the full CRL on which this delta CRL is based.
  - `delta_crl_number` (integer, required, int32) The delta CRL number, as defined in the X.509 CRL extensions, identifying the sequence number of this delta update.
  - `base_revocation_id` (string, required) The unique identifier of the base (full) revocation entry to which this delta CRL applies.
  - `type` (string, required) One of: `delta`.

## Errors

- `401` Unauthorized
- `403` Forbidden
- `404` Not Found
  - `type` (string, required) A URI reference that identifies the error type. When accessed, it may provide human-readable documentation.
  - `title` (string, required) A short, human-readable summary of the error.
  - `status` (integer, required, int32) The HTTP status code associated with this error response.
  - `trace_id` (string, required) A unique identifier for the request, used for tracing and diagnostics.
  - `detail` (string) A human-readable explanation specific to this occurrence of the error.
  - `instance` (string) A URI reference that identifies the specific occurrence of the error.
- `422` Unprocessable Entity
  - `type` (string, required) A URI reference that identifies the error type. When accessed, it may provide human-readable documentation.
  - `title` (string, required) A short, human-readable summary of the error.
  - `status` (integer, required, int32) The HTTP status code associated with this error response.
  - `trace_id` (string, required) A unique identifier for the request, used for tracing and diagnostics.
  - `detail` (string) A human-readable explanation specific to this occurrence of the error.
  - `instance` (string) A URI reference that identifies the specific occurrence of the error.
  - `errors` (Record<string, string[]>, required) A key-value map of validation errors, where each key represents a request field and the value contains one or more messages describing why the request could not be processed.

## Example (MonoCloud .NET SDK)

```csharp
using MonoCloud.Management;
using MonoCloud.Management.Core.Base;

var apiClient = new MonoCloudManagementClient(new MonoCloudConfig("<your-domain>", "[[API-Key]]"));


var trustStoreId = "9qVBxPQiZqtUsBOykavK6";

var revocationId = "ua79xIQTsc8eX8tNYPFOm";


var result = await apiClient.TrustStores.FindCertificateRevocationAsync(trustStoreId, revocationId);
```

## Example (MonoCloud Javascript SDK)

```javascript
import { MonoCloudManagementClient } from '@monocloud/management';

const apiClient = MonoCloudManagementClient.init({ domain: '<your-domain>', apiKey: '[[API-Key]]' });

const trustStoreId = '9qVBxPQiZqtUsBOykavK6';

const revocationId = 'ua79xIQTsc8eX8tNYPFOm';

const result = apiClient.trustStores.findCertificateRevocation(trustStoreId, revocationId);
```