/sys/billing/certificates

Use the /sys/billing/certificates endpoint to fetch data about the number of PKI certificates issued by a Vault cluster.

PKI Certificate Counts

The Certificate Counts endpoint returns the number of PKI certificates issued by Vault, or an error, for each month of the given time range. By default, the endpoint returns data for the current billing period.

Request parameters

• start_time (string: "") - The year and month indicating the first month of the query range in format YYYY-MM. The start_time is required if an end_time is provided.

• end_time (string: "") - The year and month indicating the last month of the query range in format YYYY-MM. The end_time is required if a start_time is provided.

Sample payload

{
    "start_time": "2025-10",
    "end_time": "2025-11"
}

Sample request

$ curl \
    --header "X-Vault-Token: ..." \
    --data @payload.json \
    http://127.0.0.1:8200/v1/sys/billing/certificates?end_time=2025-11&start_time=2025-10

Sample response

{
    "months": [
        {
            "counts": {
                "issued_certificates": 0
            },
            "error": "certificate counts not found for 2025-10",
            "timestamp": "2025-10"
        },
        {
            "counts": {
                "issued_certificates": 2
            },
            "timestamp": "2025-11"
        }
    ]
}