{"uid":"cap_gNH4B2J6SLCIG85wdE8bP","slug":"lookproof-pem-certificate-decoder-0907d010","name":"Lookproof PEM Certificate Decoder","description":"Check SPF, DMARC, DKIM, MTA-STS, DNSSEC and more, with results that explain what was found and why. Free browser checks and a pay-per-request API with x402.","url":"https://api.lookproof.dev/v1/tls/pem-decode?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"pem":{"type":"string","title":"Pem","maxLength":16384,"minLength":1}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Tik6ueiraOLicNuhIdCP7","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Decodes a PEM-encoded X.509 certificate offline, returning subject, issuer, validity, SANs, key info, signature algorithm, CA flag, key usages, self-signed status, and SHA-256/SHA-1 fingerprints.","exampleAgentPrompt":"I have a PEM certificate I'm about to install — can you decode it and tell me the subject, issuer, which DNS names it covers, how many days it's valid for, and its SHA-256 fingerprint? Here's the PEM: -----BEGIN CERTIFICATE-----...","exampleUseCases":[{"title":"Pre-install certificate inspection","prompt":"Before I push this certificate to production, decode it and tell me the subject, issuer, expiry date, covered DNS names, and key type so I can confirm it's the right one. Here's the PEM: -----BEGIN CERTIFICATE-----MIID..."},{"title":"Certificate expiry monitoring","prompt":"I have a PEM certificate from our load balancer config — can you parse it and tell me how many days are left before it expires and what the SHA-256 fingerprint is?"},{"title":"Audit self-signed or CA certificates","prompt":"Can you inspect this certificate PEM and tell me whether it's self-signed, whether it has the CA flag set, and what key usages are listed? -----BEGIN CERTIFICATE-----MIIBxT..."}],"resultDescription":"A structured breakdown of the certificate including: subject DN, issuer DN, notBefore and notAfter dates, days remaining until expiry, list of DNS SANs and IP SANs, public key type and bit size, signature algorithm, whether the CA basic constraint is set, key usage and extended key usage flags, whether the certificate is self-signed, and both SHA-256 and SHA-1 fingerprints. No email addresses are returned. No chain building or revocation checking is performed (offline decode only).","failureModes":["Invalid or malformed PEM input returns a parse error","PEM contains a non-certificate object (e.g. private key or CSR) and is rejected","PEM string exceeds 16384 character limit","Missing 'pem' field in request body causes validation error","Certificate with unsupported encoding may fail to decode"],"whenToPreferThis":"Use this endpoint when an agent needs to inspect a single certificate file offline — without needing chain validation or OCSP/CRL revocation checks. Ideal for pre-deployment verification, fingerprint extraction, SAN enumeration, and expiry checks on a known PEM blob. Prefer the live TLS check endpoint (also on api.lookproof.dev) when you need to verify the certificate a server is actually serving in real time.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:40:14.952Z","isFirstParty":false,"canonicalSlug":"lookproof-pem-certificate-decoder-0907d010"}