TLS Hostname Certificate Validator

Use this endpoint when you need to programmatically verify that a server's TLS certificate correctly covers a given hostname via SAN or CN — particularly useful in security audits, pre-deployment checks, or monitoring pipelines. Prefer the free sandbox alternative (POST /v1/sandbox/tls-hostname) for testing; use this paid endpoint for production or when the sandbox is unavailable.

• Host unreachable or connection refused on port 443 — returns error indicating no TLS handshake possible
• Invalid URL format — returns validation error
• Certificate expired or untrusted CA — may still report SAN/CN match status but flag other issues
• Hostname mismatch detected — returns mismatch result
• Timeout during TLS handshake — returns error