{"uid":"cap_1EMvrSzviV8UWZTK_u9CK","slug":"x-509-tls-ssl-certificate-inspector-cc0d12b3","name":"X.509 TLS/SSL Certificate Inspector","description":"X.509 TLS/SSL certificate inspector — parse fields and SANs, calculate a SHA-256 fingerprint, and check hostname and time validity without trust or revocation claims.","url":"https://artifact-inspector.use.x402atlas.com/certificate?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":null,"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_LGlfBQDIBL8ya323ddrRL","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Parses X.509 certificate fields and SANs, computes a SHA-256 fingerprint, and checks hostname and time validity without performing trust chain or revocation evaluation.","exampleAgentPrompt":"Parse this PEM certificate for api.example.com, show me the issuer, SANs, SHA-256 fingerprint, and whether the certificate is currently time-valid and covers that hostname.","exampleUseCases":[{"title":"TLS certificate expiry audit","prompt":"I have a PEM certificate for payments.myapp.com — can you parse it and tell me the not-before and not-after dates so I know whether it's still within its validity window?"},{"title":"Hostname coverage verification","prompt":"Check this X.509 certificate and tell me whether it actually covers the hostname checkout.store.io — I want to see the SANs and whether the hostname matches."},{"title":"Certificate fingerprint extraction","prompt":"Give me the SHA-256 fingerprint and the full subject/issuer fields for this PEM TLS certificate so I can compare it against our pinned cert records."}],"resultDescription":"Returns parsed X.509 certificate fields (subject, issuer, serial number, public key metadata, not-before/not-after validity dates), the list of Subject Alternative Names, a SHA-256 fingerprint of the certificate, a boolean indicating whether the provided hostname is covered by the certificate, and a boolean indicating whether the certificate is currently within its time validity window. Does not perform trust-chain validation or OCSP/CRL revocation checking.","failureModes":["Invalid or malformed PEM/DER input returns a parse error","Hostname parameter missing when hostname validity is requested","Certificate uses an unsupported encoding variant","Input exceeds size limits for the bounded content inspector","Payment not included or insufficient USDC balance returns 402"],"whenToPreferThis":"Use this endpoint when you need to programmatically inspect the contents of an X.509 certificate — extracting fields, SANs, fingerprint, or checking hostname and time validity — without needing a full trust-chain or revocation check. Prefer it over OpenSSL CLI calls in agentic workflows where you need structured JSON output. It is not a substitute for full TLS handshake verification or OCSP checks.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-14T18:44:44.440Z","isFirstParty":false,"canonicalSlug":"x-509-tls-ssl-certificate-inspector-cc0d12b3"}