# SSL/TLS Certificate Inspector

> SSL/TLS Certificate Inspector is a paid API for AI agents from api.x402node.dev, paid per call via x402, $0.008/call, status unknown (last checked 2026-09-14).

Inspects a domain's SSL/TLS certificate and returns issuer, subject, validity dates, days remaining, SAN list, fingerprint, signature algorithm, and expiration status.

## Facts

- Endpoint: GET https://api.x402node.dev/domain/ssl
- Price: $0.008/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/api-x402node-dev-27cd476e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_o3YIux6ytpOmaQiwnQxQM

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability api-x402node-dev-27cd476e
```

Example prompt: Can you check the SSL certificate for api.example.com on port 443 — I want to know who issued it, when it expires, how many days are left, and whether it's about to expire?

## When to prefer this

Use this endpoint when you need to programmatically inspect, validate, or monitor SSL/TLS certificates for any domain — especially for detecting expiring or expired certificates, auditing certificate metadata (issuer, SAN, fingerprint), or integrating certificate health checks into automated workflows. Prefer over manual browser inspection or heavyweight monitoring platforms when you need structured, machine-readable certificate data on demand.

## Known failure modes

- Domain unreachable or DNS resolution failure — connection error returned
- Port not open or TLS not available on specified port — connection refused error
- Self-signed or invalid certificate may still return data but with trust warnings
- Expired certificate detected — days_remaining will be negative
- Missing or invalid domain parameter — 400 bad request
- Timeout if the remote server is slow to complete TLS handshake

## How this service works

SSL/TLS certificate inspection: issuer, subject, valid_from, valid_to, days_remaining, SAN list, fingerprint, signature algorithm. Detects expired and expiring certificates. Use ?domain=example.com and port=443, ssl certificate, tls certificate check, certificate expiry Accepts payment on Base or Solana — either network works.

## Output

Returns structured certificate details including issuer, subject, valid_from, valid_to, days_remaining, the full SAN list, fingerprint, and signature algorithm — plus flags indicating whether the certificate is expired or imminently expiring.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "port": {
       "type": "string",
       "description": "Port (optional)"
      },
      "domain": {
       "type": "string",
       "description": "Domain name (optional)"
      }
     }
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/api-x402node-dev-27cd476e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.x402node.dev](https://www.zero.xyz/host/api.x402node.dev/llms.txt)