{"uid":"cap_ocBUa_yXu2H_rerQLScED","slug":"netintel-certificate-transparency-lookup-56a34b86","name":"NetIntel Certificate Transparency Lookup","description":"Query the crt.sh certificate transparency log database to enumerate all SSL certificates ever issued for a domain — returns subdomains discovered, certificate issuers, validity periods, and a risk score flagging wildcard certs, expiring certs, and suspicious issuance patterns.","url":"https://netintel.dev/cert-transparency/lookup?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"limit":{"type":"number","description":"Maximum number of certificates to return (default: 100, max: 500)"},"domain":{"type":"string","description":"Domain name to query certificate transparency logs for (e.g. example.com)"},"include_subdomains":{"type":"boolean","description":"Whether to include subdomain certificates (default: true)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"certs":{"type":"array"},"grade":{"type":"string"},"score":{"type":"number"},"domain":{"type":"string"},"issuers":{"type":"array"},"findings":{"type":"array"},"wildcard_certs":{"type":"array"},"recently_issued":{"type":"array"},"total_certs_found":{"type":"number"},"unique_subdomains":{"type":"array"},"unique_subdomain_count":{"type":"number"},"expiring_within_30_days":{"type":"array"}}}}}}},"responseSchema":{"type":"json","example":{"certs":[{"id":12345678,"sans":["example.com","www.example.com"],"issuer":"Let's Encrypt","not_after":"2024-04-01T00:00:00Z","is_expired":false,"not_before":"2024-01-01T00:00:00Z","common_name":"example.com","is_wildcard":false,"days_until_expiry":90}],"grade":"A","score":100,"domain":"example.com","issuers":["Let's Encrypt"],"findings":[],"wildcard_certs":[],"recently_issued":[],"total_certs_found":47,"unique_subdomains":["www.example.com","mail.example.com"],"unique_subdomain_count":2,"expiring_within_30_days":[]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_01DfP3RDMUzr04ei3A7XG","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Queries certificate transparency logs for a domain to return all issued SSL/TLS certificates, subdomains, issuers, expiry info, and a security grade.","exampleAgentPrompt":"Pull all certificate transparency log entries for example.com, including subdomains, and tell me the security grade, any certificates expiring within 30 days, and which certificate authorities have issued certs for that domain.","exampleUseCases":null,"resultDescription":"Returns a list of certificates (with SANs, issuer, validity dates, wildcard status, days until expiry), an aggregate security grade (letter) and score (0-100), list of unique subdomains, list of CAs that have issued certs, recently issued certs, certs expiring within 30 days, and total cert count found.","failureModes":["Missing or invalid 'domain' query parameter returns a 400 error","Domain with no CT log entries returns empty certs array and zero counts","Rate limiting or payment failure returns 402 Payment Required","Limit exceeding max of 500 is clamped or returns a validation error","Unreachable CT log upstream may cause timeout or 503"],"whenToPreferThis":"Use this endpoint when you need to audit the full certificate history of a domain, discover subdomains via CT logs, check for unauthorized certificate issuance, or assess certificate hygiene (expiry, wildcard usage, issuer diversity). Prefer this over DNS-based enumeration when you want certificate-level detail including issuers and validity windows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-09T18:53:14.249Z","isFirstParty":false,"canonicalSlug":"netintel-certificate-transparency-lookup-56a34b86"}