# ForgeMesh SSL Certificate Check

> ForgeMesh SSL Certificate Check is a paid API for AI agents from x402.forgemesh.io, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-15).

Inspects any domain's TLS/SSL certificate and returns issuer, subject, validity window, days until expiry, SAN list, and current validation status — including for expired or invalid certificates.

## Facts

- Endpoint: POST https://x402.forgemesh.io/ssl-certificate-check
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/forgemesh-ssl-certificate-check-6c6993f8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_1kx_thzkGfn7IcMiT--g1

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability forgemesh-ssl-certificate-check-6c6993f8 -d '<json body>'
```

Example prompt: Check the SSL certificate for api.stripe.com — I want to know who issued it, when it expires, how many days are left, what domains are in the SAN list, and whether it's currently valid.

## When to prefer this

Use this endpoint when you need programmatic, structured TLS certificate data for any domain — especially for uptime monitors, certificate renewal alerting pipelines, or security-screening workflows. It is particularly valuable because it returns details even for expired or invalid certificates, unlike browser-based checks that may block access to cert metadata when validation fails.

## Known failure modes

- Domain does not exist or is unreachable — returns error or empty result
- Domain has no SSL certificate configured — returns appropriate error
- Payment of 0.003 USDC not completed — request rejected with 402
- Malformed domain input (e.g. includes protocol prefix) — parsing error
- Network timeout reaching the target domain

## How this service works

SSL certificate API: inspect any domain's TLS certificate — issuer, subject, validity window, days until expiry, SAN list, and whether it currently validates — including expired or invalid certs (the ones you most need to see). For uptime monitors, renewal alerting, and security-screening agents run on a schedule.

## Output

Returns the TLS certificate's issuer, subject, validity start and end dates, days remaining until expiry, subject alternative names (SAN list), and a boolean indicating whether the certificate currently validates — including details for expired or invalid certs.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "hostname, e.g. example.com"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "issuer": "DigiCert Inc",
  "authorized": true,
  "days_until_expiry": 143
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/forgemesh-ssl-certificate-check-6c6993f8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.forgemesh.io](https://www.zero.xyz/host/x402.forgemesh.io/llms.txt)