X.509 TLS/SSL certificate inspector — parse fields and SANs, calculate a SHA-256 finger…
X.509 TLS/SSL certificate inspector — parse fields and SANs, calculate a SHA-256 fingerprint, and check hostname and time validity without trust or revocation claims.
by artifact-inspector.use.x402atlas.com · discovered, not yet claimed by its owner · updated 2026-10-06
Mirrored from Coinbase's public x402 Bazaar. The description is the provider's own text and has not been reviewed here; the payment requirements are copied as published.
What it does
X.509 TLS/SSL certificate inspector — parse fields and SANs, calculate a SHA-256 fingerprint, and check hostname and time validity without trust or revocation claims.
Tags: x509-certificate · tls-certificate · certificate-fingerprint · hostname-match · rfc5280 · bazaar
Use with an agent
- Discover. Agents find this listing with
GET https://bazaar.saylorinnovations.com/discovery/search?query=…, the MCP toolsearch_resources, or/discovery/resources. - Inspect. Fetch
/resources/28644.jsonfor the price and payment options. - Pay. Call
GET https://artifact-inspector.use.x402atlas.com/certificate. The provider answers402with its payment requirements. An x402 client signs one of the options below and retries withPAYMENT-SIGNATURE. - Execute. The provider returns
200with the data. Agent Bazaar is not in the request path and never sees your payment.
For humans
You don't need an account or an API key; you need a wallet holding a small amount of USDC on Base, Polygon, Arbitrum One, Solana, and an x402-capable client (see the examples below). Call the endpoint unpaid first to see exactly what it asks for.
Pricing & payment
- Price
- $0.005 / request
- Protocol
- x402 v2
- Auth
- No account or API key. Pay per request.
- Networks
- Base, Polygon, Arbitrum One, Solana
- Calls (30d)
- 3 · 2 unique payers (third-party data from the public x402 Bazaar)
x402 payment requirements
| Scheme | Network | Asset | Amount | Pay to | Timeout |
|---|---|---|---|---|---|
| exact | Base eip155:8453 | USDC | $0.005 | 0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2 | 300s |
| exact | Polygon eip155:137 | USDC | $0.005 | 0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2 | 300s |
| exact | Arbitrum One eip155:42161 | USDC | $0.005 | 0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2 | 300s |
| exact | Solana solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp | USDC | $0.005 | ASt6xvRyQ7ntERsmcYVMdLqZvz1GEN8Fzexzq62tXrNQ | 300s |
accepts[] (raw JSON)
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "5000",
"amountUsd": 0.005,
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "eip155:137",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"amount": "5000",
"amountUsd": 0.005,
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "eip155:42161",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"amount": "5000",
"amountUsd": 0.005,
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "ASt6xvRyQ7ntERsmcYVMdLqZvz1GEN8Fzexzq62tXrNQ",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"amount": "5000",
"amountUsd": 0.005,
"maxTimeoutSeconds": 300
}
]Schemas
Output schema (JSON Schema)
{
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"_atlas": {
"additionalProperties": false,
"description": "Atlas documentation and related-route metadata added after deployment",
"properties": {
"docs": {
"description": "Documentation URL for this bridge",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"related": {
"description": "Bounded related Atlas routes",
"items": {
"additionalProperties": false,
"description": "One related Atlas route",
"properties": {
"bridge": {
"description": "Related bridge name",
"maxLength": 64,
"type": "string"
},
"docs": {
"description": "Related bridge documentation URL",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"summary": {
"description": "Short capability summary",
"maxLength": 256,
"type": "string"
},
"url": {
"description": "Related route URL",
"format": "uri",
"maxLength": 512,
"type": "string"
}
},
"required": [
"bridge",
"url",
"docs",
"summary"
],
"type": "object"
},
"maxItems": 3,
"type": "array"
}
},
"required": [
"docs"
],
"type": "object"
},
"algorithm_version": {
"const": "x509-certificate-inspect-v1",
"description": "Pinned certificate inspection contract",
"type": "string"
},
"at_time": {
"description": "Applied validity comparison instant",
"format": "date-time",
"type": "string"
},
"certificate": {
"additionalProperties": false,
"description": "Normalized RFC 5280 leaf certificate fields without a trust conclusion",
"properties": {
"constraints": {
"additionalProperties": false,
"description": "Parsed basic constraints without path validation",
"properties": {
"basic_constraints_valid": {
"description": "Whether a basic constraints extension was parsed",
"type": "boolean"
},
"is_ca": {
"description": "Certificate CA bit; not a trust result",
"type": "boolean"
},
"max_path_length": {
"description": "Parsed path length, often -1 when absent",
"minimum": -1,
"type": "integer"
},
"max_path_length_zero": {
"description": "Whether an explicit zero path length was present",
"type": "boolean"
}
},
"required": [
"basic_constraints_valid",
"is_ca",
"max_path_length",
"max_path_length_zero"
],
"type": "object"
},
"extended_key_usage": {
"description": "Normalized extended key usages and unknown OIDs",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 128,
"type": "array"
},
"fingerprint_sha256": {
"description": "Colon-separated uppercase SHA-256 fingerprint of the exact DER bytes",
"pattern": "^([0-9A-F]{2}:){31}[0-9A-F]{2}$",
"type": "string"
},
"issuer": {
"description": "Printable issuer distinguished name",
"type": "string"
},
"issuer_rdns": {
"description": "Ordered issuer relative distinguished names",
"items": {
"description": "One relative distinguished name set",
"items": {
"additionalProperties": false,
"description": "One distinguished-name attribute",
"properties": {
"name": {
"description": "Known stable attribute name or unknown",
"type": "string"
},
"oid": {
"description": "Dotted-decimal attribute object identifier",
"type": "string"
},
"value": {
"description": "Printable attribute value",
"type": "string"
}
},
"required": [
"oid",
"name",
"value"
],
"type": "object"
},
"maxItems": 32,
"type": "array"
},
"maxItems": 128,
"type": "array"
},
"key_usage": {
"description": "Normalized RFC 5280 key usage names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 9,
"type": "array"
},
"not_after": {
"description": "Certificate validity upper bound",
"format": "date-time",
"type": "string"
},
"not_before": {
"description": "Certificate validity lower bound",
"format": "date-time",
"type": "string"
},
"public_key": {
"additionalProperties": false,
"description": "Included public-key algorithm and size",
"properties": {
"algorithm": {
"description": "Parsed public-key algorithm",
"type": "string"
},
"bits": {
"description": "Public-key or curve bit size; zero only for an unsupported parsed type",
"maximum": 16384,
"minimum": 0,
"type": "integer"
}
},
"required": [
"algorithm",
"bits"
],
"type": "object"
},
"sans": {
"additionalProperties": false,
"description": "Caller-provided subject alternative names; URI values were not fetched",
"properties": {
"dns_names": {
"description": "DNS subject alternative names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
},
"email_addresses": {
"description": "Email subject alternative names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
},
"ip_addresses": {
"description": "Canonical IP subject alternative names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
},
"uris": {
"description": "URI subject alternative names; never fetched",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
}
},
"required": [
"dns_names",
"email_addresses",
"ip_addresses",
"uris"
],
"type": "object"
},
"serial_hex": {
"description": "Certificate serial number in uppercase hexadecimal",
"type": "string"
},
"signature_algorithm": {
"description": "Parsed certificate signature algorithm name",
"type": "string"
},
"subject": {
"description": "Printable subject distinguished name",
"type": "string"
},
"subject_rdns": {
"description": "Ordered subject relative distinguished names",
"items": {
"description": "One relative distinguished name set",
"items": {
"additionalProperties": false,
"description": "One distinguished-name attribute",
"properties": {
"name": {
"description": "Known stable attribute name or unknown",
"type": "string"
},
"oid": {
"description": "Dotted-decimal attribute object identifier",
"type": "string"
},
"value": {
"description": "Printable attribute value",
"type": "string"
}
},
"required": [
"oid",
"name",
"value"
],
"type": "object"
},
"maxItems": 32,
"type": "array"
},
"maxItems": 128,
"type": "array"
}
},
"required": [
"fingerprint_sha256",
"serial_hex",
"subject",
"subject_rdns",
"issuer",
"issuer_rdns",
"not_before",
"not_after",
"sans",
"key_usage",
"extended_key_usage",
"public_key",
"signature_algorithm",
"constraints"
],
"type": "object"
},
"hostname": {
"description": "Compared hostname, empty when not requested",
"type": "string"
},
"hostname_evaluated": {
"description": "Whether hostname comparison was requested",
"type": "boolean"
},
"hostname_matches": {
"description": "Standard name-matcher result; not a trust decision",
"type": "boolean"
},
"operation": {
"const": "certificate-inspect",
"description": "Stable operation name",
"type": "string"
},
"time_status": {
"description": "Date-only status; not a trust decision",
"enum": [
"not_yet_valid",
"currently_valid",
"expired"
],
"type": "string"
},
"warnings": {
"description": "Trust and parsing limitations; never certificate trust conclusions",
"items": {
"description": "Human-readable warning",
"type": "string"
},
"maxItems": 8,
"type": "array"
}
},
"required": [
"operation",
"algorithm_version",
"at_time",
"hostname_evaluated",
"hostname",
"hostname_matches",
"time_status",
"certificate",
"warnings"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}Example shape — generated from the schema, not a captured live response
{
"example": {
"_atlas": {
"docs": "https://example.com",
"related": [
{
"bridge": "string",
"docs": "https://example.com",
"summary": "string",
"url": "https://example.com"
}
]
},
"algorithm_version": "string",
"at_time": "2026-01-01T00:00:00Z",
"certificate": {
"constraints": {
"basic_constraints_valid": true,
"is_ca": true,
"max_path_length": 0,
"max_path_length_zero": true
},
"extended_key_usage": [
"string"
],
"fingerprint_sha256": "string",
"issuer": "string",
"issuer_rdns": [
[
{
"name": "string",
"oid": "string",
"value": "string"
}
]
],
"key_usage": [
"string"
],
"not_after": "2026-01-01T00:00:00Z",
"not_before": "2026-01-01T00:00:00Z",
"public_key": {
"algorithm": "string",
"bits": 0
},
"sans": {
"dns_names": [
"string"
],
"email_addresses": [
"string"
],
"ip_addresses": [
"string"
],
"uris": [
"string"
]
},
"serial_hex": "string",
"signature_algorithm": "string",
"subject": "string",
"subject_rdns": [
[
{
"name": "string",
"oid": "string",
"value": "string"
}
]
]
},
"hostname": "string",
"hostname_evaluated": true,
"hostname_matches": true,
"operation": "string",
"time_status": "not_yet_valid",
"warnings": [
"string"
]
},
"type": "string"
}Examples
curl "https://artifact-inspector.use.x402atlas.com/certificate"
# -> 402 Payment Required, accepts[] lists how to pay
# retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paidconst res = await fetch("https://artifact-inspector.use.x402atlas.com/certificate");
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}import httpx
res = httpx.get("https://artifact-inspector.use.x402atlas.com/certificate")
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerDetails
- Provider
- artifact-inspector.use.x402atlas.com
- Endpoint
- https://artifact-inspector.use.x402atlas.com/certificate
- Machine-readable
/resources/28644.json