{"uid":"cap_F-5Yf-YVvmNe0WpdqDDyw","slug":"sitecheck-certificate-transparency-lookup-4cc74a36","name":"SiteCheck Certificate Transparency Lookup","description":"Certificate transparency records for a domain from the CertSpotter public CT index: certificate id, validity dates, revocation flag and the DNS names on each certificate (including subdomains). Shows issued certificates only, not live TLS configuration. crt.sh was unavailable during testing, so CertSpotter is used.","url":"https://api.healthtravel-api.workers.dev/api/travel/crtsh-certificate-transparency?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"limit":{"type":"string","description":"Max certificates, 1 to 50 (default 10)"},"domain":{"type":"string","description":"Domain name, e.g. wikivoyage.org (letters, digits, dots, hyphens)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"count":3,"domain":"wikivoyage.org","source":"https://api.certspotter.com/v1/issuances","checkedAt":"2026-10-23T09:36:41.317Z","certificates":[{"id":"16313322805","revoked":false,"dnsNames":["*.m.mediawiki.org","*.m.wikibooks.org"],"notAfter":"2026-11-03T19:15:40Z","notBefore":"2026-08-05T19:15:41Z","certSha256":"08e0b65df41fb075ec91c1dcd2cacc4e8c7dda53b754806525117b32f7b73253"},{"id":"17388610453","revoked":false,"dnsNames":["*.m.mediawiki.org","*.m.wikibooks.org"],"notAfter":"2026-12-23T14:37:36Z","notBefore":"2026-09-24T14:37:37Z","certSha256":"9908b07ed23df45f6bd5023880863a3d023db2a4748763defed536e3162a32d2"}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_FQAjayxLKHfTh_rt7zxsN","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves SSL/TLS certificate transparency records for a domain from crt.sh/Certspotter, returning certificate details including validity periods, DNS names, and SHA-256 hashes.","exampleAgentPrompt":"Can you pull the certificate transparency records for example.com from crt.sh and show me up to 20 certificates, including their validity dates and which DNS names they cover?","exampleUseCases":[{"title":"Detect unauthorized certificate issuance","prompt":"Check crt.sh for any SSL certificates issued for mybusiness.com — I want to see all of them, up to 50, to make sure no unauthorized certs have been issued for my domain."},{"title":"Subdomain discovery via CT logs","prompt":"Use certificate transparency logs to find all DNS names associated with certificates issued for stripe.com — show me up to 30 results so I can map out their subdomain footprint."},{"title":"Verify certificate fingerprint before deployment","prompt":"Look up the certificate transparency records for api.acmecorp.io and give me the SHA-256 fingerprint and expiry date for the most recent certificate — I need to confirm it matches what we deployed."}],"resultDescription":"Returns a JSON object with the queried domain, a count of certificates found, the Certspotter API source URL, a timestamp of when the check was performed, and an array of certificate records each containing: certificate ID, revocation status, list of DNS names covered, notBefore/notAfter validity dates, and the SHA-256 certificate fingerprint.","failureModes":["Invalid domain format returns an error (domain must use letters, digits, dots, hyphens only)","limit parameter out of range (must be 1–50) may return an error or be clamped","Domain not found in CT logs returns an empty certificates array with count 0","Upstream Certspotter API unavailability causes a 5xx error; no charge on failed calls","Rate limiting by upstream provider may result in delayed or empty responses"],"whenToPreferThis":"Choose this endpoint when you need to query certificate transparency logs for a specific domain without setting up an API key or account with Certspotter/crt.sh directly. Ideal for one-off or infrequent certificate lookups in agent workflows where pay-per-call is preferred over a subscription. Useful for security audits, subdomain enumeration via CT logs, and verifying certificate integrity. Prefer this over direct crt.sh web scraping when you need structured JSON output with consistent schema.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T12:50:15.930Z","isFirstParty":false,"canonicalSlug":"sitecheck-certificate-transparency-lookup-4cc74a36"}