{"uid":"cap_OZ3FwYFg7y6C-viNjz6Tl","slug":"sitecheck-ssl-certificate-checker-fca2aeb3","name":"SiteCheck SSL Certificate Checker","description":"TLS certificate expiry for up to 10 hostnames: the issuer, validity dates, days left, all DNS names and a status (ok, expiring within 14 days, expired, none found). Read from Certificate Transparency logs (CertSpotter, crt.sh as fallback), so it is the newest valid certificate issued for each name, not the one the server presents; the answer also says whether https answers and its HSTS header. Public hostnames only.","url":"https://api.sitecheck-api.workers.dev/api/ssl?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["hosts"],"properties":{"hosts":{"type":"string","description":"Comma-separated public hostnames, 1 to 10, e.g. github.com,example.com"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"note":"A certificate that the host serves is normally the newest one issued for its name; a replaced certificate can show here a little before the server uses it. Certificates issued for a name that is not on the host's list are not shown.","basis":"Certificate Transparency logs (newest valid certificate for the name), not the live TLS handshake","count":2,"source":"api.certspotter.com (crt.sh as fallback) and an HTTPS HEAD request to each host","results":[{"host":"github.com","https":{"hsts":"max-age=31536000; includeSubdomains; preload","status":200,"answers":true},"status":"ok","ctSource":"certspotter","certificate":{"issuer":"Sectigo","daysLeft":88,"dnsNames":["garage.github.com","gist.github.com","github.com"],"notAfter":"2027-01-11T23:59:59Z","wildcard":false,"notBefore":"2026-10-14T00:00:00Z"}},{"host":"example.com","https":{"hsts":null,"status":200,"answers":true},"status":"ok","ctSource":"certspotter","certificate":{"issuer":"SSL.com","daysLeft":71,"dnsNames":["*.example.com","example.com"],"notAfter":"2026-12-25T22:56:35Z","wildcard":true,"notBefore":"2026-09-26T22:49:11Z"}}],"checkedAt":"2026-10-15T06:45:34.578Z"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_sydde-K4HqNWxeziZICE4","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves SSL/TLS certificate details and HTTPS status for up to 10 hostnames using Certificate Transparency logs","exampleAgentPrompt":"Can you check the SSL certificate status for api.mycompany.com and shop.mycompany.com — I want to know who issued them, when they expire, and whether HSTS is enabled?","exampleUseCases":[{"title":"Monitor certificate expiry across fleet","prompt":"Check the SSL certificates for these five domains and tell me which ones expire in the next 90 days: store.acme.com, api.acme.com, docs.acme.com, admin.acme.com, cdn.acme.com"},{"title":"Verify HTTPS security posture for new site","prompt":"I just launched brandnewsite.io — can you confirm it has a valid SSL cert, who issued it, and whether HSTS is set up correctly?"},{"title":"Audit competitor certificate transparency","prompt":"Look up the SSL certificate details for stripe.com and square.com — I want to see the issuer, expiry dates, and what DNS names are covered by each cert"}],"resultDescription":"Returns a JSON object with a per-host breakdown including: certificate issuer, notBefore/notAfter validity dates, days remaining, covered DNS names, wildcard flag, CT log source used (certspotter or crt.sh), HTTPS HEAD response status code, HSTS header value, and DNS resolution status. Also includes a top-level note about CT log behaviour, the data basis, and the timestamp of the check.","failureModes":["Invalid or non-public hostname returns an error or missing result for that host","Host with no certificate in CT logs may return empty certificate data","Network timeout reaching the host for the HTTPS HEAD request","Exceeding the 10-host limit causes a validation error","Newly issued certificates may not yet appear in CT logs","CT log APIs (certspotter/crt.sh) rate limiting or downtime causing fallback or failure"],"whenToPreferThis":"Use this endpoint when you need programmatic, bulk SSL certificate intelligence sourced from Certificate Transparency logs rather than a live TLS handshake — ideal for monitoring certificate expiry across multiple domains in one call, checking HSTS configuration, verifying issuer identity, and detecting wildcard certs. Prefer it over live-handshake tools when you want historical CT log data or need to check up to 10 hosts simultaneously at low cost ($0.001/call).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T12:45:03.999Z","isFirstParty":false,"canonicalSlug":"sitecheck-ssl-certificate-checker-fca2aeb3"}