{"uid":"cap_A46It-3RXhzBOQ4IfZPo9","slug":"halowerk-sicherwerk-csr-self-signature-audit-d977aa32","name":"HALOWERK sicherwerk CSR Self-Signature Audit","description":"Runs the pinned OpenSSL build against a submitted certificate request and answers two questions a registration authority has to settle before it signs anything: does the request carry a valid self-signature over its own body, and what exactly is being requested. The reply names the subject, the public key parameters and every requested extension as OpenSSL parses them, so a policy check compares against the parsed request rather than the text an applicant supplied.","url":"https://sicher.halowerk.com/v1/oss-openssl-csr-self-signature-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"csr_pem":{"type":"string","maxLength":262144,"minLength":1}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_3YAZ8epN3ZXWKbRwSmAe3","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates a PEM-encoded certificate signing request by verifying its self-signature and parsing all requested fields, extensions, and public key parameters via a pinned OpenSSL build.","exampleAgentPrompt":"Can you check this CSR to confirm its self-signature is valid and tell me exactly what subject, public key type, and extensions it's requesting? Here's the PEM: -----BEGIN CERTIFICATE REQUEST----- MIIBIjANBgkq...","exampleUseCases":[{"title":"RA pre-signing integrity check","prompt":"Before we sign this certificate request, verify that its self-signature is intact and give me a full breakdown of the subject DN, key algorithm, and every extension it's asking for — here's the PEM."},{"title":"Policy compliance before issuance","prompt":"Our CA policy only allows RSA-2048 or ECDSA P-256 with specific SANs — can you parse this CSR and tell me exactly what key type and extensions are in it so I can check it against policy?"},{"title":"Automated CSR validation pipeline","prompt":"I'm processing a batch of customer certificate requests — for this one, verify the self-signature is valid and extract all the requested fields so I can log them before forwarding to the signing queue."}],"resultDescription":"Returns whether the CSR self-signature is cryptographically valid, plus OpenSSL-parsed details including the subject distinguished name, public key algorithm and parameters, and all requested certificate extensions — giving a registration authority a trustworthy parsed view of what the applicant is requesting.","failureModes":["Malformed or non-PEM input returns a parse error","CSR with invalid self-signature returns a failed verification result","CSR exceeding 262144 bytes is rejected","Non-PKCS#10 PEM blocks (e.g. a certificate instead of a CSR) cause a parsing failure","Payment failure (x402) blocks the request before processing"],"whenToPreferThis":"Choose this endpoint when you need a deterministic, OpenSSL-backed audit of a PKCS#10 CSR before a registration authority signs it — particularly when you need both signature validity and a trusted parsed representation of the subject, key, and extensions for policy enforcement. Prefer this over client-side parsing when you cannot trust the applicant's own tooling or representation of the request.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T00:33:30.172Z","isFirstParty":false,"canonicalSlug":"halowerk-sicherwerk-csr-self-signature-audit-d977aa32"}