# List PKI banned certificates (/docs/apis/management/trust-stores/GetAllPkiBannedCertificates)

`GET /truststores/pki/{trust_store_id}/banned_certificates`

Retrieves the list of client certificates that are explicitly banned for the specified PKI trust store.

Base URL: `https://{tenant}.{region}.monocloud.com/api`, where `{tenant}`, `{region}` (one of us, eu, in) come from your tenant. Authentication: send your Management API key in the `X-API-KEY` header.

## Parameters

- `trust_store_id` (path) (string, required) The unique identifier of the trust store.

## Response body

`200`, JSON. The banned certificates were retrieved successfully

Returns `BannedCertificate[]`. Each item has these fields:

- `id` (string, required) The unique identifier of the banned certificate entry.
- `type` (string, required) Specifies the identifier type used to ban the certificate. One of: `thumbprint`, `serial_number`, `subject`.
- `value` (string, required) The certificate identifier value used for banning.
- `reason` (string) The reason explaining why the certificate was banned.
- `creation_time` (integer, required, date-time) Specifies the time at which the certificate was banned (in Epoch).

## Errors

- `400` Bad Request
  - `type` (string, required) A URI reference that identifies the error type. When accessed, it may provide human-readable documentation.
  - `title` (string, required) A short, human-readable summary of the error.
  - `status` (integer, required, int32) The HTTP status code associated with this error response.
  - `trace_id` (string, required) A unique identifier for the request, used for tracing and diagnostics.
  - `detail` (string) A human-readable explanation specific to this occurrence of the error.
  - `instance` (string) A URI reference that identifies the specific occurrence of the error.
- `401` Unauthorized
- `403` Forbidden
- `404` Not Found
  Same body as `400`.
- `422` Unprocessable Entity
  - `type` (string, required) A URI reference that identifies the error type. When accessed, it may provide human-readable documentation.
  - `title` (string, required) A short, human-readable summary of the error.
  - `status` (integer, required, int32) The HTTP status code associated with this error response.
  - `trace_id` (string, required) A unique identifier for the request, used for tracing and diagnostics.
  - `detail` (string) A human-readable explanation specific to this occurrence of the error.
  - `instance` (string) A URI reference that identifies the specific occurrence of the error.
  - `errors` (Record<string, string[]>, required) A key-value map of validation errors, where each key represents a request field and the value contains one or more messages describing why the request could not be processed.

## Example (MonoCloud .NET SDK)

```csharp
using MonoCloud.Management;
using MonoCloud.Management.Core.Base;

var apiClient = new MonoCloudManagementClient(new MonoCloudConfig("<your-domain>", "[[API-Key]]"));


var trustStoreId = "9qVBxPQiZqtUsBOykavK6";


var result = await apiClient.TrustStores.GetAllPkiBannedCertificatesAsync(trustStoreId);
```

## Example (MonoCloud Javascript SDK)

```javascript
import { MonoCloudManagementClient } from '@monocloud/management';

const apiClient = MonoCloudManagementClient.init({ domain: '<your-domain>', apiKey: '[[API-Key]]' });

const trustStoreId = '9qVBxPQiZqtUsBOykavK6';

const result = apiClient.trustStores.getAllPkiBannedCertificates(trustStoreId);
```