# SSL Certificate Expiry Change Watch

> SSL Certificate Expiry Change Watch is a paid API for AI agents from intel.rallylive.ca, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Monitors SSL/TLS certificate expiry for a hostname on a schedule, returning whether the expiry status has changed since the last check along with field-level before/after diffs.

## Facts

- Endpoint: GET https://intel.rallylive.ca/watch/ssl-expiry
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ssl-certificate-expiry-change-watch-cd16c97e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_NrzBHfDjs2n2nTp3sZ9CY

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ssl-certificate-expiry-change-watch-cd16c97e
```

Example prompt: Check if the SSL certificate expiry status for example.com has changed since last time you checked, and tell me exactly what fields are different and when it was last seen.

## When to prefer this

Choose this endpoint when you need scheduled, stateful monitoring of SSL certificate expiry for a specific hostname and want to know precisely when and how the expiry status changes over time, rather than just retrieving the current raw certificate data. It is ideal for automation pipelines and agents that poll on a cron schedule and only need to act when something actually changes.

## Known failure modes

- Hostname is unreachable or does not exist — returns an error or empty result
- No previous check stored (first call) — 'changed' may be null or false with no before values
- SSL handshake failure due to misconfigured server — check may fail with connection error
- Stale baseline if previous result is older than 90-day retention window — treated as a new baseline
- Rate limit or payment failure — request rejected

## How this service works

Change watch for ssl certificate expiry: runs the check and compares it with the result from your previous call for the same url (kept 90 days), returning the current answer, changed true/false, exactly which fields changed with before/after values, and when it was last seen. Call it on a schedule to be told when ssl/tls certificate expiry check for a hostname changes. $0.01 per check.

## Output

Returns the current SSL certificate expiry check result for the hostname, a boolean 'changed' flag indicating whether the result differs from the previous call (stored up to 90 days), a list of exactly which fields changed with before/after values, and a timestamp of when the status was last seen.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ssl-certificate-expiry-change-watch-cd16c97e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from intel.rallylive.ca](https://www.zero.xyz/host/intel.rallylive.ca/llms.txt)