# SYNTHORA Certificate Transparency Issuance Search

> SYNTHORA Certificate Transparency Issuance Search is a paid API for AI agents from certspotter-ct-issuances.hergertsynthora.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-13).

Queries SSLMate's Cert Spotter CT log aggregator to return all issued TLS certificates and their SAN subdomains for a given domain, including issuer, validity window, and revocation status.

## Facts

- Endpoint: POST https://certspotter-ct-issuances.hergertsynthora.com/service
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/synthora-certificate-transparency-issuance-search-f3ebbbc3
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_2xeCbtDvOlMiY6qi__DSl

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability synthora-certificate-transparency-issuance-search-f3ebbbc3 -d '<json body>'
```

Example prompt: Can you pull all the TLS certificates and subdomains that have been issued for example.com from the Certificate Transparency logs, including who issued them, their validity dates, and whether any have been revoked?

## When to prefer this

Prefer this endpoint over direct crt.sh queries when you need a reliable, pay-per-use, agent-friendly API that aggregates Certificate Transparency logs via Cert Spotter. Ideal for automated attack surface discovery, subdomain enumeration pipelines, and certificate monitoring workflows where you need structured JSON output with issuer, validity, and revocation data without scraping or rate-limit concerns of public CT search frontends.

## Known failure modes

- Domain not found in CT logs — returns empty result set if no certificates have ever been issued
- Invalid domain format — may return error if domain string is malformed
- Rate limiting or upstream Cert Spotter API unavailability — may return error or timeout
- Very new domains with no CT log entries yet — returns empty results
- Network or service downtime — endpoint unreachable

## How this service works

Returns issued TLS certificates (and all subdomains in their SAN dns_names) for a domain from SSLMate's Cert Spotter Certificate Transparency log aggregator, including issuer, validity window and revocation flag. A2A use: attack-surface-discovery and subdomain-enumeration agents map an org's hostnames and detect unexpected or expiring certs. Reliable crt.sh alternative. First 3 calls FREE per wallet — send header X-WALLET: 0x<addr>. No charge on upstream failure.

## Output

Returns a JSON object containing all TLS certificates issued for the queried domain as recorded in Certificate Transparency logs via Cert Spotter. Each record includes the certificate's SAN dns_names (revealing all associated subdomains), the issuing certificate authority, the validity window (not-before / not-after dates), and a revocation flag indicating whether the certificate has been revoked.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "domain"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "niche": "certspotter-ct-issuances",
  "result": {}
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/synthora-certificate-transparency-issuance-search-f3ebbbc3/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from certspotter-ct-issuances.hergertsynthora.com](https://www.zero.xyz/host/certspotter-ct-issuances.hergertsynthora.com/llms.txt)