{"uid":"cap_UqE0U_T9lWafeOGBl1x-c","slug":"dns-intelligence-api-ssl-certificate-lookup-86820e7a","name":"DNS Intelligence API – SSL Certificate Lookup","description":"DNS records, WHOIS, SSL certificate, subdomain discovery, and reverse-IP lookup with x402 payments.","url":"https://dns.payapi.market/dns/ssl?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"port":{"type":"integer","maximum":65535,"minimum":1,"description":"TLS port for the handshake. Defaults to 443."},"domain":{"type":"string","description":"Domain name to fetch the live TLS certificate from, e.g. 'example.com'."}}},"responseSchema":{"type":"json","example":{"port":443,"domain":"example.com","issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","countryName":"US","organizationName":"DigiCert Inc"},"subject":{"commonName":"*.example.com"},"version":3,"not_after":"2026-01-15T23:59:59","san_count":2,"not_before":"2025-01-15T00:00:00","tls_version":"TLSv1.3","cipher_suite":"TLS_AES_256_GCM_SHA384","serial_number":"0A1B2C3D4E5F60718293A4B5C6D7E8F9","days_remaining":163,"subject_alt_names":["*.example.com","example.com"],"issuer_common_name":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","issuer_organization":"DigiCert Inc","subject_common_name":"*.example.com"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_S2JfkCfVeqj8bINoHbj9E","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches live TLS/SSL certificate details for a domain, including issuer, validity dates, SANs, cipher suite, and days remaining.","exampleAgentPrompt":"Can you pull the live SSL certificate details for example.com on port 443 — I want to see the issuer, expiry date, TLS version, and which domains the cert covers?","exampleUseCases":[{"title":"Certificate expiry monitoring alert","prompt":"Check the SSL certificate on api.mycompany.com port 443 and tell me how many days are left before it expires and who issued it."},{"title":"Security audit of TLS configuration","prompt":"Pull the live TLS certificate details for shop.acme.com — I need the TLS version, cipher suite, and issuer so I can check if it meets our security standards."},{"title":"Wildcard cert coverage verification","prompt":"Can you check the SSL cert for staging.example.com on port 8443 and confirm whether it's a wildcard cert and what subject alternative names it covers?"}],"resultDescription":"Returns a JSON object with full SSL/TLS certificate details including: issuer (common name, organization, country), subject common name, subject alternative names (SANs), TLS version (e.g. TLSv1.3), cipher suite, certificate serial number, validity window (not_before, not_after), days remaining until expiry, and the port used for the handshake.","failureModes":["Domain does not exist or is unreachable — connection timeout or DNS resolution failure","Port is not running a TLS service — handshake failure","Self-signed or expired certificate may still be returned but flagged in context","Invalid domain format returns a validation error","Non-standard ports blocked by firewall return connection refused"],"whenToPreferThis":"Use this endpoint when you need to inspect a live, real-time TLS certificate from a domain's server rather than looking up cached or historical cert data. It is ideal for certificate expiry monitoring, security audits of cipher suites and TLS versions, verifying SAN coverage, and checking issuer chains — especially when you need current data straight from the TLS handshake rather than a certificate transparency log.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T12:38:52.052Z","isFirstParty":false,"canonicalSlug":"dns-intelligence-api-ssl-certificate-lookup-86820e7a"}