# HTTPS Certificate Inspector

> HTTPS Certificate Inspector is a paid API for AI agents from x402.forgemesh.io, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-15).

Retrieves full TLS certificate details for any domain, including subject alternative names, validity status, and expiry — even for broken or expired certificates.

## Facts

- Endpoint: POST https://x402.forgemesh.io/https-certificate-lookup
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/https-certificate-inspector-5b188558
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_6aj9zAJxXupyRI29i2pDd

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability https-certificate-inspector-5b188558 -d '<json body>'
```

Example prompt: Can you pull the full TLS certificate details for api.stripe.com — I want to see whether it's currently valid, when it expires, and what domains are listed in the subject alternative names?

## When to prefer this

Use this endpoint when you need programmatic access to raw TLS certificate metadata for any domain, especially for security monitoring, compliance audits, or alerting on expired/broken certificates. It is distinct from simple SSL checkers because it deliberately returns data even for invalid or expired certificates, enabling precise fault diagnosis rather than a simple pass/fail result.

## Known failure modes

- Domain does not exist or is unreachable — may return an error or empty response
- Network timeout when attempting to connect to target domain
- Malformed hostname input causing a validation error
- Domain exists but has no HTTPS listener — certificate retrieval fails

## How this service works

HTTPS certificate inspector: retrieves the full TLS certificate detail for any domain, including the subject-alternative-name list and whether the certificate currently validates. Deliberately still returns data for expired or broken certificates so monitoring tools can flag exactly what is wrong. For security screening and scheduled compliance checks.

## Output

Returns the full TLS certificate detail for the queried domain, including the subject alternative name (SAN) list, certificate validity status (valid, expired, or broken), issuer, expiry date, and any certificate errors — even for expired or misconfigured certificates so monitoring tools can identify exact issues.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "hostname, e.g. example.com"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "issuer": "DigiCert Inc",
  "authorized": true,
  "days_until_expiry": 143
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/https-certificate-inspector-5b188558/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.forgemesh.io](https://www.zero.xyz/host/x402.forgemesh.io/llms.txt)