# Tinstop SSL/TLS Certificate Check

> Tinstop SSL/TLS Certificate Check is a paid API for AI agents from tinstop.com, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Checks the SSL/TLS certificate validity, expiry, issuer, and hostname coverage for a given domain

## Facts

- Endpoint: POST https://tinstop.com/v1/ssl-check
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tinstop-ssl-tls-certificate-check-c4bf939f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_a6Cfd4Wa6xA2p_zzVPjtY

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tinstop-ssl-tls-certificate-check-c4bf939f -d '<json body>'
```

Example prompt: Can you check the SSL certificate for stripe.com — I want to know if it's valid, who issued it, and how many days until it expires?

## When to prefer this

Choose this endpoint when you need a quick, per-call SSL/TLS certificate inspection without setting up an account or API key. It is ideal for ad-hoc domain security audits, automated monitoring pipelines that pay per check in USDC via x402, or when you need structured machine-readable certificate data including SANs, issuer details, and hostname validation. Prefer it over general web scanners when you specifically need SSL/TLS certificate metadata in a programmatic format at low cost ($0.02/call).

## Known failure modes

- Domain does not exist or is unreachable — may return issues array with connectivity error
- Domain has no SSL certificate (HTTP-only) — ssl_valid will be false with relevant issues
- Certificate is self-signed or uses an untrusted CA — captured in issues array
- Invalid domain format provided (e.g. includes http://) — input validation error
- Timeout reaching the domain's SSL endpoint — error or empty response
- Cached result returned (check 'cached' field) — may not reflect very recent certificate changes

## How this service works

Tinstop is a machine-payable Website Intelligence API for domain security and performance audits: DNS, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email authentication, and Google PageSpeed. Pay per call with x402 using USDC on Base. No accounts or API keys.

## Output

Returns a structured object with: whether the SSL certificate is currently valid (ssl_valid boolean), the certificate issuer details (organization, CN, etc.), expiry date in ISO 8601 UTC, days remaining until expiry, Subject Alternative Names (SANs) covered by the cert, whether the queried hostname matches the certificate's CN or SANs, the certificate's not-before date, a list of detected issues (e.g. expired, hostname mismatch, self-signed), a unique scan_id, and whether the result was served from cache.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "The domain name to check (e.g. 'example.com'). Do not include http:// or https:// protocol prefixes."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "title": "SslCheckResponse",
 "required": [
  "domain",
  "ssl_valid",
  "issuer",
  "expires_in_days",
  "sans",
  "issues",
  "scan_id"
 ],
 "properties": {
  "sans": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "title": "Sans"
  },
  "cached": {
   "type": "boolean",
   "title": "Cached",
   "default": false
  },
  "domain": {
   "type": "string",
   "title": "Domain"
  },
  "issuer": {
   "anyOf": [
    {
     "type": "object",
     "additionalProperties": {
      "type": "string"
     }
    },
    {
     "type": "null"
    }
   ],
   "title": "Issuer"
  },
  "issues": {
   "type": "array",
   "items": {
    "type": "object",
    "additionalProperties": true
   },
   "title": "Issues"
  },
  "scan_id": {
   "type": "string",
   "title": "Scan Id"
  },
  "ssl_valid": {
   "type": "boolean",
   "title": "Ssl Valid"
  },
  "expires_at": {
   "anyOf": [
    {
     "type": "string"
    },
    {
     "type": "null"
    }
   ],
   "title": "Expires At",
   "description": "ISO 8601 UTC timestamp when certificate expires"
  },
  "not_before": {
   "anyOf": [
    {
     "type": "string"
    },
    {
     "type": "null"
    }
   ],
   "title": "Not Before",
   "description": "ISO 8601 UTC timestamp when certificate becomes valid"
  },
  "request_id": {
   "anyOf": [
    {
     "type": "string"
    },
    {
     "type": "null"
    }
   ],
   "title": "Request Id",
   "description": "Gateway request tracking ID"
  },
  "expires_in_days": {
   "anyOf": [
    {
     "type": "integer"
    },
    {
     "type": "null"
    }
   ],
   "title": "Expires In Days"
  },
  "hostname_matches": {
   "anyOf": [
    {
     "type": "boolean"
    },
    {
     "type": "null"
    }
   ],
   "title": "Hostname Matches",
   "description": "True if domain hostname matches SSL CN or SANs"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tinstop-ssl-tls-certificate-check-c4bf939f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tinstop.com](https://www.zero.xyz/host/tinstop.com/llms.txt)