Get Certificate
Retrieve a single certificate by id, including a short-lived download_url. Live-only.
Get Certificate (2026-03-01)
Retrieve a single exemption certificate by id, including a short-liveddownload_url for the original document.
X-API-Version: 2026-03-01 header. Certificate
endpoints are live-only — using a sk_test_* key returns
TESTMODE_NOT_SUPPORTED. Certificates outside your account return
CERTIFICATE_NOT_FOUND (404).The download_url field
download_url is a pre-signed URL pointing to the original certificate
document. It expires one hour after the response is issued — re-fetch
the certificate to mint a fresh URL.
download_url is null (not omitted) when no document is attached to the
certificate yet — typical for processing certificates that haven’t finished
ingestion. The certificate itself still exists; the response is 200, not
404. Poll the certificate until a download_url appears, or wait for the
certificate.processing_completed webhook (coming in a future release).
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Headers
2026-03-01 Path Parameters
Response
Certificate detail (includes pre-signed download_url)
A single exemption certificate.
"cert_a8f3d2c1-1b9a-4c5e-8d7e-6f4a3b2c1d0e"
The type of object: tax.exemption_certificate
"tax.exemption_certificate"
Public lifecycle state of an exemption certificate. expiring and expired are distinct from invalid so a renewable lapse is distinguishable from a revoked or rejected certificate.
processing, needs_info, active, expiring, expired, invalid The type of an exemption certificate.
The specific Customer record linked to this certificate. null when no live Customer has been associated yet (a master buyer may still be present — see linked_buyer).
The master buyer entity that owns this certificate. Populated whenever the certificate has a master-buyer reference, even when no Customer record has been linked yet. Prefer this over customer for rendering "who owns this certificate".
true Pre-signed URL to download the original certificate document. Expires one hour after issuance — refetch the certificate to mint a new URL. null (response still 200) when no document is attached yet. Treat as confidential.