{"uid":"cap_bO4cnmMJQ5YeR2G8iewVM","slug":"ssl-tls-certificate-check-expiry-monitor-5a7a1ed8","name":"SSL/TLS Certificate Check & Expiry Monitor","description":"Pay-per-call data and tools for AI agents, $0.002-0.01 per call in USDC via x402 (Base, Polygon or Solana), no account or API key; MAX tiers ($0.05-0.25) run deeper jobs. Agent toolkit: web search, search + read top pages, any page as clean markdown with a prompt-injection check, which-x402-API-to-call recommender, seller check. Data: Google Maps places with contacts, YouTube video data and transcripts, job listings (Indeed, LinkedIn, 13 boards), Google Ads Transparency, TikTok comments, Pinterest, Airbnb, Redfin, AliExpress, app stores, live sports, website and SEO checks, Shopify store tech stacks, and onchain token / address risk checks.","url":"https://agent-data.centorprat.workers.dev/tools/ssl-certificate-expiry-check?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"hosts":{"type":"array","items":{"type":"string"},"maxItems":3,"description":"e.g. [\"github.com\", \"https://your-site.com\", \"mail.example.com:993\"]. A URL is reduced to host; add :port for non-443. One report per host."},"warnDays":{"type":"integer","description":"Certificates expiring within this many days are flagged 'expiring-soon'."},"criticalDays":{"type":"integer","description":"Certificates expiring within this many days are flagged 'expiring-very-soon'."},"onlyProblems":{"type":"boolean","description":"On: return only expiring/expired/invalid/unreachable hosts (ideal for scheduled alerting)."}}},"responseSchema":{"type":"json","example":{"items":[{"host":"github.com","port":443,"valid":true,"issuer":"Sectigo Limited","signal":"valid","target":"github.com","notAfter":"Nov 29 23:59:59 2026 GMT","sanCount":2,"checkedAt":"2026-10-23T11:31:49+00:00","notBefore":"Sep  1 00:00:00 2026 GMT","reachable":true,"daysUntilExpiry":37,"subjectAltNames":["github.com","www.github.com"],"subjectCommonName":"github.com"}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_CQsB3d2F18etqtDTlfeJH","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs passive TLS handshakes on given hosts/URLs and returns certificate validity, expiry status, issuer, SANs, and TLS version, with configurable expiry alerts via webhook.","exampleAgentPrompt":"Check the SSL certificates on github.com, api.mycompany.com, and mail.example.com:993 — flag anything expiring within 30 days as a warning and within 7 days as critical, and only show me the ones with problems.","exampleUseCases":[{"title":"Pre-launch certificate audit","prompt":"Before we go live, check the TLS certificates on staging.myapp.com, myapp.com, and api.myapp.com — tell me if any are invalid, expired, or expiring within 14 days, and what TLS version each one is using."},{"title":"Weekly expiry alert for SRE team","prompt":"Every week I want to check all three of our customer-facing domains — shop.acme.com, auth.acme.com, and cdn.acme.com — and only report back the ones where the certificate expires within 21 days or is already expired, so I can page the team."},{"title":"Third-party vendor certificate verification","prompt":"We just signed a contract with a vendor at api.vendorcorp.io — can you do a TLS handshake and tell me who issued their certificate, when it expires, what SANs it covers, and whether it's currently valid?"}],"resultDescription":"For each host, returns a structured report including: certificate validity status signal (valid, expiring-soon, expiring-very-soon, expired, invalid, or unreachable), number of days until expiry, certificate issuer and subject, Subject Alternative Names (SANs), and the TLS version negotiated during the handshake. Failed/unreachable hosts are reported but not charged.","failureModes":["Host unreachable or connection timeout — returns 'unreachable' signal for that host","Invalid or self-signed certificate — returns 'invalid' signal","Port not specified defaults to 443; wrong port causes connection failure","Input array exceeds 3 hosts — rejected by schema validation","Non-HTTPS scheme provided — URL stripped to host and assumed port 443","Transient network errors may cause intermittent unreachable results"],"whenToPreferThis":"Choose this endpoint when you need a lightweight, keyless passive TLS inspection — no client certificates or auth keys required. Ideal for scheduled certificate expiry monitoring across a small set of hosts (up to 3 per call), especially when you want configurable warn/critical day thresholds and webhook-based alerting. Prefer this over full SSL scanner tools when you only need validity status, expiry timing, issuer, and SANs rather than deep vulnerability scanning (e.g., cipher suite weakness analysis).","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T06:30:45.083Z","isFirstParty":false,"canonicalSlug":"ssl-tls-certificate-check-expiry-monitor-5a7a1ed8"}