{"uid":"cap_UDiWhMMR5veGqnf89hWSQ","slug":"domain-intelligence-tls-certificate-lookup-80197c23","name":"Domain Intelligence TLS Certificate Lookup","description":"Deterministic DNS/RDAP/TLS domain intelligence for AI agents. x402 inline, no account.","url":"https://domain-intelligence.nordman-tehau.workers.dev/tls?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain name to look up (e.g. example.com)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"ok":true,"tls":{"ok":true,"result":{"issuerCN":"Example CA","notAfter":"2027-03-01T23:59:59Z","certCount":2,"derLength":1234,"notBefore":"2026-03-01T00:00:00Z","subjectCN":"example.com","tlsVersion":"TLSv1.2","subjectAltNames":["example.com","www.example.com"],"fingerprintSha256Hex":"ab:cd:ef:..."}},"cached":false,"domain":"example.com","data_age_seconds":0}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ok8ybixlJ7tbq74THC3WV","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves TLS/SSL certificate details for a given domain, including issuer, validity dates, subject alt names, and fingerprint.","exampleAgentPrompt":"Can you pull the TLS certificate details for stripe.com — I want to see who issued it, when it expires, and its SHA-256 fingerprint?","exampleUseCases":[{"title":"Expiry monitoring for production domains","prompt":"Check the TLS certificate for api.mycompany.com and tell me when it expires and who issued it — I want to know if we're close to needing a renewal."},{"title":"Security audit of third-party vendor domain","prompt":"I need the TLS certificate info for payments.vendor.com — specifically the issuer, fingerprint, and which subject alt names are covered."},{"title":"Verifying certificate after deployment","prompt":"We just deployed a new cert on staging.myapp.io — can you confirm what TLS version it's running, when it's valid from and to, and that the subject CN looks right?"}],"resultDescription":"Returns a JSON object containing: TLS version (e.g. TLSv1.2), issuer common name, subject common name, certificate validity window (notBefore, notAfter), list of subject alternative names, SHA-256 fingerprint in hex, certificate count, DER length, and whether the result was cached. Also includes overall success flag and data age in seconds.","failureModes":["Invalid or non-existent domain returns error with ok:false","Domain with no TLS/HTTPS returns empty or error TLS block","Network timeout reaching the target domain","Malformed domain query parameter causes 400-level response","Domain resolves but certificate is expired or self-signed — data still returned but may indicate invalid state"],"whenToPreferThis":"Use this endpoint when you need deterministic, structured TLS certificate metadata for a domain without setting up an account or managing auth tokens. It is ideal for agents doing security audits, certificate expiry monitoring, vendor assessments, or post-deployment verification. It complements the sibling DNS and RDAP endpoints on the same host for full domain intelligence. Prefer it over browser-based or manual certificate inspection when you need machine-readable cert data at low cost ($0.001 USDC per call) via x402 inline payment.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T00:34:36.745Z","isFirstParty":false,"canonicalSlug":"domain-intelligence-tls-certificate-lookup-80197c23"}