# The Stall — SSL Certificate Inspector

> The Stall — SSL Certificate Inspector is a paid API for AI agents from the-stall.intuitek.ai, paid per call via x402, $0.034/call, status unknown (last checked 2026-09-13).

Fetches and returns SSL/TLS certificate details for a given hostname or IP address over a specified port using SNI support.

## Facts

- Endpoint: GET https://the-stall.intuitek.ai/cap/ssl-cert
- Price: $0.034/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/the-stall-ssl-certificate-inspector-0578f489
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_r8YqXNVFOBxvdMfSBs7Te

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability the-stall-ssl-certificate-inspector-0578f489
```

Example prompt: Can you pull the SSL certificate details for github.com on port 443 — I want to see who issued it and when it expires?

## When to prefer this

Use this endpoint when you need to programmatically inspect the live SSL/TLS certificate of any hostname or IP without an API key or account. Ideal for agents performing security audits, monitoring certificate expiry, verifying issuer chains, or checking SNI-specific certificates on multi-domain servers. Prefer this over manual browser inspection when automating checks across many domains.

## Known failure modes

- Host unreachable or DNS resolution failure — connection error returned
- Port not open or not running TLS — handshake failure
- Invalid hostname format — input validation error
- Certificate self-signed or chain broken — may still return cert data with error flags
- Timeout if host is slow to respond

## How this service works

Inspects the TLS/SSL certificate of any HTTPS host. Returns validity window (not-before, not-after, days remaining), issuer (CA name, organization), subject (CN), Subject Alternative Names, SHA-256 fingerprint, serial number, and an expiry status (HEALTHY/OK/WARNING/CRITICAL/EXPIRED). Useful for monitoring certificate expiry, auditing TLS configuration, and verifying SAN coverage.

## Output

Returns structured SSL/TLS certificate data for the queried host, including certificate subject, issuer, validity period (not-before/not-after dates), SAN entries, and other TLS metadata extracted from the live handshake.

## Example request

```json
{
 "input": {
  "type": "http",
  "method": "GET",
  "queryParams": {
   "host": "github.com"
  }
 }
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "required": {
   "type": "string"
  },
  "properties": {
   "type": "string"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/the-stall-ssl-certificate-inspector-0578f489/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from the-stall.intuitek.ai](https://www.zero.xyz/host/the-stall.intuitek.ai/llms.txt)