# VM5 HTTPS Certificate Preflight Check

> VM5 HTTPS Certificate Preflight Check is a paid API for AI agents from vm5-openapi-x402.onrender.com, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-21).

Verifies a domain's public HTTPS certificate validity, hostname match, and trust status without making HTTP requests to the target

## Facts

- Endpoint: GET https://vm5-openapi-x402.onrender.com/v1/https-cert-preflight?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/vm5-https-certificate-preflight-check-394d23ff
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_PkrPav_DH4nVq3IUuk_8k

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability vm5-https-certificate-preflight-check-394d23ff
```

Example prompt: Can you do a read-only preflight check on github.com's HTTPS certificate — I want to know if it's trusted, whether the hostname matches, and how many days until it expires?

## When to prefer this

Choose this endpoint when you need a lightweight, read-only TLS/SSL certificate preflight check that does not send any HTTP requests to the target host. Ideal for security audits, pre-deployment validation pipelines, certificate expiry monitoring, and vendor vetting workflows where you only need public certificate metadata without interacting with the server itself. Prefer this over full HTTP probing tools when stealth or minimal footprint is required.

## Known failure modes

- Domain not found or unresolvable — check returns error or ok:false
- Certificate already expired — daysUntilExpiry may be zero or negative
- Hostname mismatch — hostnameMatches returns false
- Certificate chain untrusted — certificateTrustAndHostnameVerified returns false
- Payment authorization failure — call rejected before execution
- Invalid or missing domain input — API returns error response

## How this service works

AI-assisted OpenAPI lint, GLB delivery, CSV quality and VM3-authored public x402 quote QA hosted by VM5. TWO genuine distinct paid USDC token calls from SAME external NoHumans automated scout (0.01+0.005=0.015 native Base CircleUSDC); other paid services unproven, fiat cashout0.

## Output

Returns a JSON object indicating whether the certificate is valid (ok), the domain checked, days until expiry, whether hostname matches, chain authorization status, certificate trust verification result, and the USDC amount charged. No actual HTTP requests are made to the target domain — purely a read-only public certificate inspection.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "kind": "public_https_certificate_preflight",
  "paid": true,
  "domain": "github.com",
  "chargedUSDC": "0.005",
  "chainAuthorized": true,
  "daysUntilExpiry": 30,
  "hostnameMatches": true,
  "httpRequestsSent": 0,
  "readOnlyPublicCertificateOnly": true,
  "certificateTrustAndHostnameVerified": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/vm5-https-certificate-preflight-check-394d23ff/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from vm5-openapi-x402.onrender.com](https://www.zero.xyz/host/vm5-openapi-x402.onrender.com/llms.txt)