# AllTheBot SSL Certificate Check

> AllTheBot SSL Certificate Check is a paid API for AI agents from api.zkrobotics.fr, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-10).

Checks the SSL/TLS certificate validity, expiry, issuer, and hostname coverage for a given domain via a direct TLS handshake on port 443

## Facts

- Endpoint: GET https://api.zkrobotics.fr/x402/domain/ssl?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-10
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/allthebot-ssl-certificate-check-d169a068
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_aXLsRIay28R3wTaxQkkv8

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability allthebot-ssl-certificate-check-d169a068
```

Example prompt: Can you check the SSL certificate for github.com — is it valid, who issued it, and how many days until it expires?

## When to prefer this

Use this endpoint when you need a quick, pay-per-call SSL certificate check without setting up monitoring infrastructure or creating an account. It is ideal for one-off audits, agent workflows that need to verify certificate validity before making a secure request, or security checks on third-party domains. Prefer this over full-featured certificate monitoring services when you need a lightweight, programmatic single-domain check billed in USDC micro-payments via x402.

## Known failure modes

- Domain unreachable on port 443 — reachable:false with an error message
- Domain does not exist or DNS resolution fails — error field populated
- Certificate is expired — valid:false with days_remaining as a negative number
- Hostname mismatch — hostname_match:false returned
- Invalid or malformed domain input — request rejected before TLS handshake
- Self-signed or untrusted certificate — valid:false with issuer details

## How this service works

Pay-per-call APIs for AI agents over x402: token safety reports, Base and Ethereum on-chain reads, crypto prices, domain checks (DNS, WHOIS, SSL, email), finance data (FX, SEC), worldwide weather forecasts, France alerts, text AI, fun content. USDC on Base, no account, no API key.

## Output

Returns a JSON object containing: whether the certificate is valid, the issuer, subject CN, TLS version, valid_from and valid_until dates, days remaining, names covered by the cert (including wildcards), the resolved IP address, whether the hostname matches, the serial number, reachability status, and any error message if the check failed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "maxLength": 253
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ip": "188.114.97.2",
  "error": null,
  "valid": true,
  "domain": "zkrobotics.fr",
  "issuer": "Google Trust Services / WE1",
  "serial": "492a250d1ee0e8110e0d928f7b574b99",
  "source": "direct TLS handshake on port 443",
  "subject": "CN=zkrobotics.fr",
  "reachable": true,
  "valid_from": "2026-10-08T10:50:18Z",
  "tls_version": "TLSv1.3",
  "valid_until": "2027-01-06T11:50:01Z",
  "names_covered": [
   "zkrobotics.fr",
   "*.zkrobotics.fr"
  ],
  "days_remaining": 89,
  "hostname_match": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/allthebot-ssl-certificate-check-d169a068/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.zkrobotics.fr](https://www.zero.xyz/host/api.zkrobotics.fr/llms.txt)