{"uid":"cap_PcuLVDnkCtSszyaJmFKcV","slug":"api-strale-io-bed917e4","name":"SSL/TLS Certificate Chain Inspector","description":"Inspect the full SSL/TLS certificate chain for a domain. Returns cert details, expiry, issuer, TLS version, cipher suite, and security issues.","url":"https://api.strale.io/x402/ssl-certificate-chain?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["host"],"properties":{"host":{"type":"string"},"port":{"type":"integer"}}}},"additionalProperties":false}}},"responseSchema":null,"example":{"request":{"host":"google.com","port":443},"response":{"host":"google.com","port":443,"_meta":{"payment":{"method":"x402","price_usd":0.054000000000000006,"settlement_id":"0x04d0cc114a02f457ab0412e00cdbb8a78ec70ec5ab1266abdb72bd28e85315a2"},"capability":"ssl-certificate-chain","latency_ms":36,"provenance":{"source":"tls-connect","fetched_at":"2026-06-16T04:13:29.331Z"}},"issues":["Weak key size: 256 bits"],"authorized":true,"tls_version":"TLSv1.3","chain_length":3,"cipher_suite":"TLS_AES_256_GCM_SHA384","leaf_certificate":{"valid_to":"2026-08-17T08:36:18.000Z","san_count":65,"is_expired":false,"valid_from":"2026-05-25T08:36:19.000Z","common_name":"*.google.com","organization":null,"days_until_expiry":62},"certificate_chain":[{"bits":256,"issuer":"C=US, O=Google Trust Services, CN=WR2","subject":"CN=*.google.com","valid_to":"Aug 17 08:36:18 2026 GMT","valid_from":"May 25 08:36:19 2026 GMT","serial_number":"139CDF29A8B5BC5212413EEEAFD18CBE","subject_alt_names":["DNS:*.google.com","DNS:*.appengine.google.com","DNS:*.bdn.dev","DNS:*.origin-test.bdn.dev","DNS:*.cloud.google.com","DNS:*.crowdsource.google.com","DNS:*.datacompute.google.com","DNS:*.google.ca","DNS:*.google.cl","DNS:*.google.co.in","DNS:*.google.co.jp","DNS:*.google.co.uk","DNS:*.google.com.ar","DNS:*.google.com.au","DNS:*.google.com.br","DNS:*.google.com.co","DNS:*.google.com.mx","DNS:*.google.com.tr","DNS:*.google.com.vn","DNS:*.google.de","DNS:*.google.es","DNS:*.google.fr","DNS:*.google.hu","DNS:*.google.it","DNS:*.google.nl","DNS:*.google.pl","DNS:*.google.pt","DNS:*.gemini.cloud.google.com","DNS:*.gstatic.com","DNS:*.metric.gstatic.com","DNS:*.gvt1.com","DNS:*.gcpcdn.gvt1.com","DNS:*.gvt2.com","DNS:*.gcp.gvt2.com","DNS:*.url.google.com","DNS:*.youtube-nocookie.com","DNS:*.ytimg.com","DNS:ai.android","DNS:android.com","DNS:*.android.com","DNS:*.flash.android.com","DNS:g.co","DNS:*.g.co","DNS:goo.gl","DNS:www.goo.gl","DNS:google-analytics.com","DNS:*.google-analytics.com","DNS:google.com","DNS:googlecommerce.com","DNS:*.googlecommerce.com","DNS:urchin.com","DNS:*.urchin.com","DNS:youtu.be","DNS:youtube.com","DNS:*.youtube.com","DNS:music.youtube.com","DNS:*.music.youtube.com","DNS:youtubeeducation.com","DNS:*.youtubeeducation.com","DNS:youtubekids.com","DNS:*.youtubekids.com","DNS:yt.be","DNS:*.yt.be","DNS:android.clients.google.com","DNS:*.aistudio.google.com"],"fingerprint_sha256":"E4:13:4C:BC:32:C0:C0:97:65:99:C6:84:AE:0B:6A:C8:49:B2:D7:55:46:D9:34:DF:DB:61:1F:A0:D9:A0:E9:CB"},{"bits":2048,"issuer":"C=US, O=Google Trust Services LLC, CN=GTS Root R1","subject":"C=US, O=Google Trust Services, CN=WR2","valid_to":"Feb 20 14:00:00 2029 GMT","valid_from":"Dec 13 09:00:00 2023 GMT","serial_number":"7FF005A07C4CDED100AD9D66A5107B98","subject_alt_names":[],"fingerprint_sha256":"E6:FE:22:BF:45:E4:F0:D3:B8:5C:59:E0:2C:0F:49:54:18:E1:EB:8D:32:10:F7:88:D4:8C:D5:E1:CB:54:7C:D4"},{"bits":4096,"issuer":"C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA","subject":"C=US, O=Google Trust Services LLC, CN=GTS Root R1","valid_to":"Jan 28 00:00:42 2028 GMT","valid_from":"Jun 19 00:00:42 2020 GMT","serial_number":"77BD0D6CDB36F91AEA210FC4F058D30D","subject_alt_names":[],"fingerprint_sha256":"3E:E0:27:8D:F7:1F:A3:C1:25:C4:CD:48:7F:01:D7:74:69:4E:6F:C5:7E:0C:D9:4C:24:EF:D7:69:13:39:18:E5"}]}},"exampleRequest":{"host":"google.com","port":443},"tags":["x402"],"displayCostAmount":"0.054001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.054001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.054","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.054","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_JXJoePqL6zNUTT8bY_1Bm","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.054","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Inspects the full SSL/TLS certificate chain for a domain, returning cert details, expiry, issuer, TLS version, cipher suite, and security issues.","exampleAgentPrompt":"Can you inspect the full SSL/TLS certificate chain for api.example.com on port 443 — I want to see the cert expiry, issuer, TLS version, cipher suite, and any security issues?","exampleUseCases":null,"resultDescription":"Returns the complete SSL/TLS certificate chain including each certificate's details (subject, issuer, validity dates, expiry), TLS version negotiated, cipher suite in use, and any identified security issues or misconfigurations.","failureModes":["Host unreachable or DNS resolution failure — returns connection error","Port not open or TLS not supported on specified port — returns connection refused","Invalid hostname format — returns validation error","Certificate chain retrieval timeout — returns timeout error","Self-signed or incomplete chain — returns chain with warnings about trust issues"],"whenToPreferThis":"Choose this endpoint when you need full certificate chain inspection including issuer hierarchy, TLS version, cipher suite details, and security issue detection — not just a simple expiry check. Ideal for security audits, compliance checks, and diagnosing TLS misconfigurations on web servers.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T12:50:52.792Z","isFirstParty":false,"canonicalSlug":"api-strale-io-bed917e4"}