{"uid":"cap_1DA5A3CZHvL-Poa7Zt5cP","slug":"sitecheck-web-intel-certificate-revocation-crl-check-4f9dc731","name":"SiteCheck Web Intel Certificate Revocation CRL Check","description":"For a domain's current certificate (taken from public Certificate Transparency data via CertSpotter): reads its CRL Distribution Point, downloads that public CRL, and reports whether the certificate's serial number is on it, plus the CRL's thisUpdate and nextUpdate. OCSP is not queried. Revocation status is as of the CRL's publication time.","url":"https://api.webintel-api.workers.dev/api/security/cert-revocation-crl?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain name such as wikipedia.org (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_VFgzWrmlqn0REIhQB8zKC","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a domain's current TLS certificate has been revoked by downloading its CRL Distribution Point and looking up the serial number","exampleAgentPrompt":"Can you check whether the current TLS certificate for github.com has been revoked by looking up its CRL — I want to know the revocation status and when the CRL was last updated?","exampleUseCases":[{"title":"Pre-deployment certificate health check","prompt":"Before we push to production, can you verify that the TLS certificate for api.mycompany.com hasn't been revoked according to its CRL distribution point?"},{"title":"Security audit of third-party vendor","prompt":"We're onboarding a new payment vendor — can you check if the certificate for checkout.vendorportal.com is showing as revoked on its CRL, and tell me when that CRL was last published?"},{"title":"Incident triage for suspicious domain","prompt":"We flagged suspicious traffic to login.suspectsite.net — can you check whether their TLS certificate has been revoked via its CRL distribution point and give me the revocation details?"}],"resultDescription":"Returns whether the domain's current TLS certificate serial number appears on the certificate's CRL Distribution Point list, along with the CRL's thisUpdate (last published time) and nextUpdate (next scheduled refresh time). Revocation status reflects the CRL publication time, not real-time OCSP status.","failureModes":["Domain has no resolvable certificate in Certificate Transparency logs","Certificate lacks a CRL Distribution Point extension","CRL file is unreachable or returns a non-200 response","Domain parameter missing or malformed","CRL parsing error due to unexpected format","Certificate Transparency data may lag real-time certificate issuance"],"whenToPreferThis":"Use this endpoint when you need CRL-based revocation checking specifically (not OCSP), when you want to inspect the published CRL timestamps, or when OCSP is unavailable or untrusted. Prefer over manual lookups when automating certificate health checks across many domains. Not suitable when real-time OCSP stapling status is required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-25T12:31:33.376Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-certificate-revocation-crl-check-4f9dc731"}