**Source URL:** https://general.veevavault.dev/qualityone/vault-api/api-reference/22.3/managing-vault-java-sdk/retrieve-signing-certificate

# Retrieve Signing Certificate

The following endpoint allows you to retrieve a signing certificate included in a Spark message header to verify that the received message came from Vault.

<Endpoint path="/api/{version}/services/certificate/{cert_id}" method="GET" />

## Headers

<FieldTable>
| Name | Description |
| --- | --- |
| `Accept` | `application/json` (default) or `application/xml` |
</FieldTable>

## URI Path Parameters

<FieldTable>
| Name | Description |
| --- | --- |
| `{cert_id}` | The `cert_id` is provided in each Spark message in the `X-VaultAPISignature-CertificateId` header. |
</FieldTable>

## Request

<CodeExample title="">
```bash
curl -X GET -H "Authorization: {SESSION_ID}" \
https://myvault.veevavault.com/api/v19.1/services/certificate/00001
```
</CodeExample>

## Response Details

On SUCCESS, the response includes the public key certificate (`.pem`) file used for [Message Verification](/qualityone/vault-sdk/sdk-integrations/spark-messaging/message-signing-verification).

---

**Previous:** [Validate Imported Package](/qualityone/vault-api/api-reference/22.3/managing-vault-java-sdk/validate-imported-package)  
**Next:** [Queues](/qualityone/vault-api/api-reference/22.3/managing-vault-java-sdk/queues)