Skip to content
clusters: prooflayer · edgemarket · edgefinance · synthforge · mediakit · wordmint · webprobe · locale · comppoint · rollforge · bestiary · statline · matchpoint · retail · agentops · browserworkflow · modelrouter · compose
$ man ssl-cert-info

/ssl-cert-info

agentutility / web-probe / ssl-cert-info
PRICE / CALL
$0.03
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobe
CATEGORY
utilities
STATUS
live
NAME
ssl-cert-info inspects a domain's ssl/tls certificate: issuer, subject, san list, validity dates, and days-until-expiry
SYNOPSIS
POST https://x402.agentutility.ai/ssl-cert-info
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }
↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.
DESCRIPTION

Inspects a domain's SSL/TLS certificate: issuer, subject, SAN list, validity dates, and days-until-expiry. Sourced from Certificate Transparency logs (crt.sh). Use it as an ssl cert checker or TLS certificate inspector.

INPUTrequest schema
propertytypedescriptionreq?
hoststringrequired
historybooleanoptional
OUTPUTresponse shape
fieldtypedescription
hoststringEcho of the hostname inspected, normalized to lowercase without scheme or port.
common_namestringSubject Common Name (CN) on the leaf certificate, usually the primary hostname it was issued for.
issuerstringFull issuer Distinguished Name string, including organization and country fields.
issuer_common_namestringCN of the issuing CA (e.g. "Let's Encrypt R3", "DigiCert TLS RSA SHA256 2020 CA1").
san_listarraySubject Alternative Names covered by the cert, including wildcard and additional hostnames.
san_countnumberNumber of entries in san_list.
not_beforestringISO-8601 UTC timestamp when the certificate became valid.
not_afterstringISO-8601 UTC timestamp when the certificate expires.
days_until_expirynumberWhole days from now until not_after; negative if already expired.
days_since_issuancenumberWhole days elapsed since not_before.
is_expiredbooleanTrue when the current time is past not_after.
expires_soonbooleanTrue when days_until_expiry is at or below the warning threshold (30 days).
serial_numberstringHex-encoded certificate serial number as recorded by the issuing CA.
crtsh_idnumberNumeric crt.sh record ID for the leaf cert, usable to link to https://crt.sh/?id=<id>.
cert_historyarrayPrior certs seen in CT logs for this host (issuer, not_before, not_after, crtsh_id); empty when not requested.
total_certs_seennumberTotal count of certificates ever logged for this host in Certificate Transparency.
sourcestringData source label, here "crt.sh" (Certificate Transparency log aggregator).
EXAMPLEStwo ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.agentutility.ai/ssl-cert-info \
  -H 'Content-Type: application/json' \
  -d '{ }'
first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.
EXAMPLE 2 · mcp
# Install the MCP package for this endpoint's cluster
npx -y @agentutility/mcp-<cluster>

# Required: EVM private key with USDC on Base
export X402_PRIVATE_KEY=0x...

# Then call the ssl-cert-info tool from your MCP-aware agent.
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
tags
ssltlscertificatesecurityct-logexpiry
methods
POST
cluster
webprobe
price
$0.03 USDC per call
ADJACENTother endpoints in webprobe
endpointdescriptionprice
arxiv-searcharXiv full-text search.$0.03
browser-renderLoads a public URL with JavaScript enabled and returns rendered HTML, title, final URL, byte count, or a base64 screenshot when requested.$0.03
browser-sessionLoads a URL in a real headless browser with JavaScript executed, then returns the rendered HTML and page title, or a base64 screenshot.$0.03
headless-browserOpens a public URL in a real headless browser, waits for client-side rendering, and returns the rendered DOM or a screenshot.$0.03
javascript-renderRenders a URL with JavaScript enabled and returns the browser-rendered HTML, title, resolved URL, and truncation metadata, or captures a…$0.03
ssl-certChecks a domain's SSL certificate: issuer, subject, SAN list, validity dates, and days-until-expiry.$0.03
ssl-certificate-checkSSL certificate check / TLS certificate expiry API.$0.03
subdomain-enumEnumerates a domain's subdomains by mining Certificate Transparency logs (crt.sh).$0.03
SEE ALSO
agentutility · webprobe · x402 · mcp · llms.txt · registry.json · bazaar.x402.org