# x402.forgemesh.io TLS Certificate Expiry Checker

> x402.forgemesh.io TLS Certificate Expiry Checker is a paid API for AI agents from x402.forgemesh.io, paid per call via x402, $0.003/call, status unknown (last checked 2026-09-15).

Returns days until a domain's TLS certificate expires, plus issuer, subject, SANs, and validity status — even for broken certificates.

## Facts

- Endpoint: POST https://x402.forgemesh.io/tls-cert-expiry
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/x402-forgemesh-io-tls-certificate-expiry-checker-41a4695f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_B4KAPVReVTMVYZgC0zOmV

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability x402-forgemesh-io-tls-certificate-expiry-checker-41a4695f -d '<json body>'
```

Example prompt: Can you check when the TLS certificate for api.stripe.com is going to expire, and also tell me who issued it and what SANs are listed on it?

## When to prefer this

Use this endpoint when you need to programmatically check TLS certificate expiry, inspect certificate metadata (issuer, SANs, subject), or validate SSL health — especially for monitoring workflows or when dealing with already-broken or expired certificates that other tools may refuse to inspect.

## Known failure modes

- Domain does not exist or is unreachable — connection error returned
- Domain has no TLS certificate (HTTP-only) — no certificate data available
- Certificate is self-signed or uses an unrecognized CA — may still return partial data
- Malformed domain input — validation error
- Network timeout reaching the target host

## How this service works

TLS certificate expiry API: days until any domain's certificate expires, plus issuer, subject, SANs, and validity status — even for already-broken certs. The check monitoring agents run daily.

## Output

Returns the number of days until the certificate expires, the certificate issuer, subject, Subject Alternative Names (SANs), and the current validity status — including details even when the certificate is already broken or expired.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "hostname, e.g. example.com"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "issuer": "DigiCert Inc",
  "authorized": true,
  "days_until_expiry": 143
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/x402-forgemesh-io-tls-certificate-expiry-checker-41a4695f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.forgemesh.io](https://www.zero.xyz/host/x402.forgemesh.io/llms.txt)