# BitBooth SSL Info

> BitBooth SSL Info is a paid API for AI agents from app.heinrichstech.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-11).

Returns detailed SSL/TLS certificate information for a given hostname and port, including validity, expiry, issuer, SANs, fingerprint, and cipher details.

## Facts

- Endpoint: POST https://app.heinrichstech.com/v1/cdp/ssl-info?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/bitbooth-ssl-info-29460287
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_7LuWRyRDxaQUOxeNwEOyW

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability bitbooth-ssl-info-29460287 -d '<json body>'
```

Example prompt: Can you pull the SSL certificate details for api.example.com on port 443 — I want to know the issuer, expiry date, whether it's self-signed, and how many days until it expires?

## When to prefer this

Choose this endpoint when an agent needs to programmatically inspect TLS certificate metadata for a public hostname — particularly for expiry monitoring, security auditing, self-signed certificate detection, cipher/protocol auditing, or pre-flight checks before establishing a connection. Prefer it over manual openssl commands or browser inspection when automation is needed. Not suitable for scanning private networks, IP addresses, or internal infrastructure.

## Known failure modes

- IPv4 or IPv6 address supplied instead of hostname — rejected by design
- Private or loopback host (e.g. localhost, 192.168.x.x) supplied — rejected by design
- TLS handshake timeout after 5 seconds — returns error if server is unreachable or too slow
- Invalid hostname format — returns validation error
- Port out of valid range — returns validation error
- Host has no TLS listener on the specified port — connection refused error
- Payment of 0.002 USDC not provided or x402 payment header missing — returns 402 Payment Required

## How this service works

BitBooth SSL Info: pay 0.002 USDC, get the SSL/TLS certificate details for any hostname:port — subject, issuer, validity window, SANs, SHA256 fingerprint, serial number, negotiated protocol and cipher, plus derived flags (valid, expired, selfSigned, daysUntilExpiry). Built on Node's built-in tls module with a 5s handshake cap. Rejects IPv4/IPv6 inputs and private/loopback hosts. Built for agents auditing TLS posture, monitoring expiry, or pre-flighting a target.

## Output

A JSON object containing the certificate subject (CN, O, etc.), issuer details, validity window (notBefore/notAfter), Subject Alternative Names, SHA256 fingerprint, serial number, negotiated TLS protocol and cipher suite, plus derived boolean flags: valid, expired, selfSigned, and a numeric daysUntilExpiry value.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/bitbooth-ssl-info-29460287/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from app.heinrichstech.com](https://www.zero.xyz/host/app.heinrichstech.com/llms.txt)