{"uid":"cap_v_gANx_TqdgNHy52FJSHk","slug":"scrapemole-ssl-tls-certificate-check-4e0425d1","name":"ScrapeMole SSL/TLS Certificate Check","description":"Pay-per-call domain intelligence for agents: live DNS records (DoH), WHOIS/RDAP registration data (registrar, dates, status, nameservers; no personal data), bulk domain availability (10 names per call) an email security audit (SPF, DKIM, DMARC, MTA-STS, BIMI) with a grade, a live SSL/TLS certificate check and subdomains from Certificate Transparency logs (crt.sh). USDC via x402; failed calls are never charged.\n\nPayments: x402 v2, scheme \"exact\", USDC on Base (eip155:8453). The payment is verified before the work and settled only when the response is 200. Terms: https://domains.scrapemole.workers.dev/terms","url":"https://domains.scrapemole.workers.dev/v1/ssl?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["host"],"properties":{"host":{"type":"string","examples":["github.com"],"description":"Hostname, e.g. github.com (no path)."},"port":{"type":"string","default":"443","description":"TLS port: 443, 8443, 465, 993 or 995."}},"additionalProperties":false}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"ip":"140.82.112.3","alpn":"h2","host":"github.com","port":443,"sans":["github.com","www.github.com"],"chain":[{"issuer":"Sectigo ECC Domain Validation Secure Server CA","subject":"github.com","validTo":"2026-11-29T23:59:59.000Z","selfSigned":false}],"cipher":"TLS_AES_128_GCM_SHA256","issuer":{"C":"GB","O":"Sectigo Limited","CN":"Sectigo ECC Domain Validation Secure Server CA"},"expired":false,"keyType":"EC prime256v1","subject":{"CN":"github.com"},"trusted":true,"validTo":"2026-11-29T23:59:59.000Z","protocol":"TLSv1.3","validFrom":"2026-08-01T00:00:00.000Z","handshakeMs":41,"daysRemaining":49,"hostnameMatch":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_C6neHP7G3IsCosY-yeaYL","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a live SSL/TLS certificate inspection for a given hostname, returning certificate chain, validity, cipher, protocol, SANs, and days remaining","exampleAgentPrompt":"Can you do a live SSL/TLS certificate check on api.stripe.com and tell me if it's trusted, how many days until it expires, what TLS version and cipher it's using, and who issued the cert?","exampleUseCases":[{"title":"Pre-launch SSL validation for new domain","prompt":"We're about to go live with checkout.mystore.com — can you check its SSL certificate right now and confirm it's trusted, the hostname matches, and it has at least 30 days left before expiry?"},{"title":"Security audit of non-standard TLS port","prompt":"Check the SSL certificate on mail.example.com port 993 and tell me the cipher suite, TLS protocol version, issuer, and whether it's fully trusted."},{"title":"Monitor upcoming certificate expiration","prompt":"Pull the live SSL cert details for api.mycompany.com and tell me exactly how many days are left before it expires, plus who issued it and whether the cert chain is trusted."}],"resultDescription":"Returns a JSON object with: resolved IP, ALPN protocol, hostname, port, Subject Alternative Names (SANs), full certificate chain (issuer, subject, validity, self-signed flag), cipher suite, issuer details (C, O, CN), expiry status, key type, subject CN, trust status, validity window (validFrom/validTo), TLS protocol version, TLS handshake latency in milliseconds, days remaining until expiry, and hostname match result.","failureModes":["Host not reachable or DNS resolution failure — returns error with no charge","TLS handshake timeout for slow or unresponsive servers","Invalid hostname format (e.g. hostname with path included)","Unsupported port number (must be 443, 8443, 465, 993, or 995)","Certificate exists but is self-signed or uses an untrusted CA — still returns data, trusted=false","Payment verification failure via x402 — call not executed, no charge"],"whenToPreferThis":"Use this endpoint when you need a live, real-time SSL/TLS certificate inspection rather than cached or historical data. It is ideal for security audits, certificate expiry monitoring, compliance checks, and verifying that a server's TLS configuration (protocol version, cipher suite, trust chain) meets requirements. Prefer this over passive CT log lookups when you need confirmed live connection data including handshake latency, current trust status, and hostname match. The pay-per-call USDC model (failed calls not charged) makes it safe to use in automated pipelines without billing risk on errors.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T12:41:06.184Z","isFirstParty":false,"canonicalSlug":"scrapemole-ssl-tls-certificate-check-4e0425d1"}