{"uid":"cap_taBfmprVHGBnM-OViATRG","slug":"lookproof-tls-certificate-checker-22efedc5","name":"Lookproof TLS Certificate Checker","description":"Check SPF, DMARC, DKIM, MTA-STS, DNSSEC and more, with results that explain what was found and why. Free browser checks and a pay-per-request API with x402.","url":"https://api.lookproof.dev/v1/tls/certificate?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","title":"DomainInput","required":["domain"],"properties":{"domain":{"type":"string","title":"Domain","examples":["example.com"],"maxLength":1024,"minLength":1}},"additionalProperties":false}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_VDVqKxCvi7_mt4yD-0iwO","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks the TLS certificate served on port 443 for a domain, returning chain trust, name match, expiry, issuer, key/signature algorithms, TLS version, and coded findings.","exampleAgentPrompt":"Check the TLS certificate on api.example.com — I want to know if it's trusted, whether it matches the domain name, when it expires, and if there are any issues like weak algorithms or chain problems.","exampleUseCases":[{"title":"Diagnosing HTTPS failure for a site","prompt":"HTTPS is broken on shop.acmecorp.com — can you check the TLS certificate and tell me exactly why it's failing? I need to know if it's expired, untrusted, or mismatched."},{"title":"Pre-renewal certificate expiry check","prompt":"Can you check when the TLS certificate for payments.mybiz.io expires and whether we need to renew it soon? Also flag if there are any other problems with the cert."},{"title":"Security audit of TLS configuration","prompt":"I'm auditing the TLS setup for api.fintech-startup.com — please inspect its certificate and tell me the issuer, TLS version, key algorithm, and whether there are any weak or untrusted certificate findings."}],"resultDescription":"Returns whether the certificate chains to a trusted root, whether the Subject Alternative Names match the domain per RFC 9525, the expiry date, the full certificate chain, issuer details, public key algorithm, signature algorithm, negotiated TLS version, and structured coded findings (e.g. expired, expiring-soon, untrusted, name-mismatch, weak-algorithm).","failureModes":["Domain does not exist or cannot be resolved — connection error returned","Domain is reachable but not serving TLS on port 443 — connection refused or timeout","Certificate is completely absent or handshake fails — raw TLS error surfaced","Invalid domain string provided — validation error on the input","Rate limiting or payment failure — HTTP 402 or 429 response"],"whenToPreferThis":"Choose this endpoint when an agent needs to diagnose HTTPS/TLS failures, verify certificate validity and trust chain, check imminent expiry, or audit the cryptographic configuration of a domain's certificate. It is purpose-built for structured, coded TLS findings (expired, mismatched, weak, untrusted) that go beyond a raw certificate dump, making it ideal for automated monitoring pipelines or security audits where machine-readable results are needed. Prefer it over generic DNS or HTTP tools when the specific concern is the X.509 certificate and TLS handshake, not DNS records or HTTP response content.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:40:55.373Z","isFirstParty":false,"canonicalSlug":"lookproof-tls-certificate-checker-22efedc5"}