Name: ssl-cert-info
Price: 0.03 USDC
Availability: InStock

$ man ssl-cert-info

agentutility / web-probe / ssl-cert-info

PRICE / CALL

$0.03

USDC · base mainnet · scheme: exact

METHOD

POST

CLUSTER

webprobe

CATEGORY

utilities

STATUS

● live

NAME

ssl-cert-info — inspects a domain's ssl/tls certificate: issuer, subject, san list, validity dates, and days-until-expiry

SYNOPSIS

POST https://x402.agentutility.ai/ssl-cert-info
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }

↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.

DESCRIPTION

Inspects a domain's SSL/TLS certificate: issuer, subject, SAN list, validity dates, and days-until-expiry. Sourced from Certificate Transparency logs (crt.sh). Use it as an ssl cert checker or TLS certificate inspector.

INPUT — request schema

property	type	description	req?
host	string	Hostname to inspect, e.g. 'example.com'. Normalized (scheme/port stripped).	required
history	boolean	Include up to 50 historical certificates for the host. Optional, default false.	optional

OUTPUT — response shape

field	type	description
host	string	Echo of the hostname inspected, normalized to lowercase without scheme or port.
common_name	string	Subject Common Name (CN) on the leaf certificate, usually the primary hostname it was issued for.
issuer	string	Full issuer Distinguished Name string, including organization and country fields.
issuer_common_name	string	CN of the issuing CA (e.g. "Let's Encrypt R3", "DigiCert TLS RSA SHA256 2020 CA1").
san_list	array	Subject Alternative Names covered by the cert, including wildcard and additional hostnames.
san_count	number	Number of entries in san_list.
not_before	string	ISO-8601 UTC timestamp when the certificate became valid.
not_after	string	ISO-8601 UTC timestamp when the certificate expires.
days_until_expiry	number	Whole days from now until not_after; negative if already expired.
days_since_issuance	number	Whole days elapsed since not_before.
is_expired	boolean	True when the current time is past not_after.
expires_soon	boolean	True when days_until_expiry is at or below the warning threshold (30 days).
serial_number	string	Hex-encoded certificate serial number as recorded by the issuing CA.
crtsh_id	number	Numeric crt.sh record ID for the leaf cert, usable to link to https://crt.sh/?id=<id>.
cert_history	array	Prior certs seen in CT logs for this host (issuer, not_before, not_after, crtsh_id); empty when not requested.
total_certs_seen	number	Total count of certificates ever logged for this host in Certificate Transparency.
source	string	Data source label, here "crt.sh" (Certificate Transparency log aggregator).

EXAMPLES — two ways to call

EXAMPLE 1 · curl

curl -X POST https://x402.agentutility.ai/ssl-cert-info \
  -H 'Content-Type: application/json' \
  -d '{ }'

first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.

EXAMPLE 2 · mcp

# Install the MCP package for this endpoint's cluster
npx -y @agentutility/mcp-<cluster>

# Required: EVM private key with USDC on Base
export X402_PRIVATE_KEY=0x...

# Then call the ssl-cert-info tool from your MCP-aware agent.

MCP server handles payment automatically — your coding agent just calls the tool by name.

METADATA

tags: ssltlscertificatesecurityct-logexpiry
methods: POST
cluster: webprobe
price: $0.03 USDC per call

ADJACENT — other endpoints in webprobe

endpoint	description	price
arxiv-search	Search arXiv's full paper catalog by query, author, category, or a specific id-list and get back structured results instead of scraping HTML.	$0.03
browser-render	Loads a public URL with JavaScript enabled and returns rendered HTML, title, final URL, byte count, or a base64 screenshot when requested.	$0.03
browser-session	Loads a URL in a real headless browser with JavaScript executed, then returns the rendered HTML and page title, or a base64 screenshot.	$0.03
headless-browser	Opens a public URL in a real headless browser, waits for client-side rendering, and returns the rendered DOM or a screenshot.	$0.03
javascript-render	Renders a URL with JavaScript enabled and returns the browser-rendered HTML, title, resolved URL, and truncation metadata, or captures a…	$0.03
ssl-cert	Checks a domain's SSL certificate: issuer, subject, SAN list, validity dates, and days-until-expiry.	$0.03
ssl-certificate-check	Check a domain's current TLS certificate without opening a raw socket.	$0.03
subdomain-enum	Enumerates a domain's subdomains by mining Certificate Transparency logs (crt.sh).	$0.03