# HALOWERK sicherwerk — PEM Certificate Bundle Normalizer

> HALOWERK sicherwerk — PEM Certificate Bundle Normalizer is a paid API for AI agents from sicher.halowerk.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-29).

Accepts up to 16 PEM certificates and returns a deduplicated, normalized bundle by comparing canonical DER encodings rather than raw PEM text

## Facts

- Endpoint: POST https://sicher.halowerk.com/v1/oss-openssl-certificate-bundle-normalize?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/halowerk-sicherwerk-pem-certificate-bundle-normalizer-67ca5e51
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_42YaTdrnBvfpolVEvUAcJ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability halowerk-sicherwerk-pem-certificate-bundle-normalizer-67ca5e51 -d '<json body>'
```

Example prompt: I have a batch of up to 16 PEM certificates that may have duplicates with different line wrapping or header text — can you normalize them into a single deduplicated bundle so I can build a clean trust store?

## When to prefer this

Choose this endpoint when you need to programmatically deduplicate and normalize a set of PEM certificates before building or shipping a trust store, especially when certificates may have been gathered from multiple sources with inconsistent formatting. It is ideal as a preprocessing step in certificate management pipelines where textual PEM differences (whitespace, headers, line lengths) would otherwise cause false duplicates. Prefer this over manual deduplication or generic text-diff tools because it operates on canonical DER encoding, guaranteeing cryptographically correct deduplication.

## Known failure modes

- More than 16 certificates submitted — input limit exceeded
- Malformed PEM data that cannot be parsed or decoded to DER
- Non-certificate PEM blocks (e.g. private keys or CSRs) submitted instead of certificates
- Payment failure via x402 protocol resulting in 402 response
- Empty input or missing required fields returning a 400-level error

## How this service works

Accepts up to sixteen certificates in any PEM shape and returns a single normalized bundle. Duplicates are identified by their canonical DER encoding, not by the PEM text, so the same certificate supplied twice with different line wrapping, different header text or trailing whitespace collapses into one entry. The reply gives the input count, the unique count and the resulting bundle, which makes it usable as a preparation step before a trust store is built or shipped.

## Output

A JSON response containing the original input certificate count, the count of unique certificates after deduplication (compared by canonical DER encoding), and the resulting normalized PEM bundle with all duplicates removed — regardless of differences in PEM text formatting, header variants, line wrapping, or trailing whitespace.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType"
   ],
   "properties": {
    "type": {
     "const": "http"
    },
    "method": {
     "const": "POST"
    },
    "bodyType": {
     "const": "json"
    },
    "schemaUrl": {
     "type": "string",
     "format": "uri"
    },
    "exampleUrl": {
     "type": "string",
     "format": "uri"
    }
   },
   "additionalProperties": true
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "const": "json"
    },
    "schemaUrl": {
     "type": "string",
     "format": "uri"
    },
    "exampleUrl": {
     "type": "string",
     "format": "uri"
    }
   },
   "additionalProperties": true
  }
 },
 "additionalProperties": true
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/halowerk-sicherwerk-pem-certificate-bundle-normalizer-67ca5e51/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from sicher.halowerk.com](https://www.zero.xyz/host/sicher.halowerk.com/llms.txt)