# sicher.halowerk.com TLS Chain Inspector

> sicher.halowerk.com TLS Chain Inspector is a paid API for AI agents from sicher.halowerk.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-14).

Opens a TLS connection to a hostname and returns the full certificate chain with detailed per-cert metadata plus health signals like expiry countdown, coverage check, self-signed flags, and weak algorithm detection.

## Facts

- Endpoint: POST https://sicher.halowerk.com/v1/tls-chain
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sicher-halowerk-com-tls-chain-inspector-4cc7e2a2
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ngunfE2eoKr722xLLLUZg

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sicher-halowerk-com-tls-chain-inspector-4cc7e2a2 -d '<json body>'
```

Example prompt: Can you check the TLS certificate chain for api.example.com on port 443 — I want to know if the hostname is covered, how many days until the nearest cert expires, whether any cert is self-signed or uses a weak algorithm, and the SHA-256 fingerprint of the leaf certificate?

## When to prefer this

Choose this endpoint when you need a live, real-time inspection of what a TLS server actually presents — not a cached or third-party lookup. It is ideal for certificate expiry monitoring, pre-deployment TLS audits, wildcard coverage verification, weak-algorithm detection, and fingerprint validation without relying on external certificate transparency logs or scan databases.

## Known failure modes

- Connection timeout if the host is unreachable or port is closed
- TLS handshake failure if the server rejects the connection
- Invalid hostname returns an error
- Port out of range returns a validation error
- Server presents an empty or malformed chain
- DNS resolution failure for the provided hostname

## How this service works

Opens a TLS connection and reports the chain the server presents. Per certificate: subject and issuer, validity window with days remaining, serial, SHA-256 fingerprint, key type and size, and the subject alternative names. Above that it answers the questions a monitor asks: is the requested hostname covered by the leaf certificate including wildcard rules, how many days until the nearest expiry, is any certificate self-signed or signed with a weak algorithm, does the server send its…

## Output

Returns the full ordered certificate chain the server presents, with per-certificate fields including subject, issuer, validity start and end dates, days remaining, serial number, SHA-256 fingerprint, key type and size, and subject alternative names. Also returns aggregated health signals: whether the requested hostname is covered by the leaf certificate (including wildcard matching), the minimum days to expiry across the chain, flags for any self-signed certificate, and flags for any certificate signed with a weak algorithm, plus an indication of whether the server sends a complete chain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "host": {
   "type": "string",
   "maxLength": 255,
   "description": "Hostname or https URL, e.g. example.com."
  },
  "port": {
   "type": "integer",
   "default": 443,
   "maximum": 65535,
   "minimum": 1,
   "description": "TLS port."
  },
  "warn_days": {
   "type": "integer",
   "default": 30,
   "maximum": 365,
   "minimum": 1,
   "description": "Warn when a certificate expires within this many days."
  },
  "servername": {
   "type": "string",
   "maxLength": 255,
   "description": "SNI name if it differs from host."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sicher-halowerk-com-tls-chain-inspector-4cc7e2a2/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from sicher.halowerk.com](https://www.zero.xyz/host/sicher.halowerk.com/llms.txt)