{ "x402Version": 2, "id": 28644, "slug": "28644", "resource": "https://artifact-inspector.use.x402atlas.com/certificate", "description": "X.509 TLS/SSL certificate inspector — parse fields and SANs, calculate a SHA-256 fingerprint, and check hostname and time validity without trust or revocation claims.", "type": "http", "serviceName": "Artifact Inspector", "resourceType": "Blockchain Data", "accepts": [ { "scheme": "exact", "network": "eip155:8453", "payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2", "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "amount": "5000", "amountUsd": 0.005, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:137", "payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2", "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359", "amount": "5000", "amountUsd": 0.005, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:42161", "payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2", "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831", "amount": "5000", "amountUsd": 0.005, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp", "payTo": "ASt6xvRyQ7ntERsmcYVMdLqZvz1GEN8Fzexzq62tXrNQ", "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v", "amount": "5000", "amountUsd": 0.005, "maxTimeoutSeconds": 300 } ], "outputSchema": { "properties": { "example": { "additionalProperties": false, "properties": { "_atlas": { "additionalProperties": false, "description": "Atlas documentation and related-route metadata added after deployment", "properties": { "docs": { "description": "Documentation URL for this bridge", "format": "uri", "maxLength": 512, "type": "string" }, "related": { "description": "Bounded related Atlas routes", "items": { "additionalProperties": false, "description": "One related Atlas route", "properties": { "bridge": { "description": "Related bridge name", "maxLength": 64, "type": "string" }, "docs": { "description": "Related bridge documentation URL", "format": "uri", "maxLength": 512, "type": "string" }, "summary": { "description": "Short capability summary", "maxLength": 256, "type": "string" }, "url": { "description": "Related route URL", "format": "uri", "maxLength": 512, "type": "string" } }, "required": [ "bridge", "url", "docs", "summary" ], "type": "object" }, "maxItems": 3, "type": "array" } }, "required": [ "docs" ], "type": "object" }, "algorithm_version": { "const": "x509-certificate-inspect-v1", "description": "Pinned certificate inspection contract", "type": "string" }, "at_time": { "description": "Applied validity comparison instant", "format": "date-time", "type": "string" }, "certificate": { "additionalProperties": false, "description": "Normalized RFC 5280 leaf certificate fields without a trust conclusion", "properties": { "constraints": { "additionalProperties": false, "description": "Parsed basic constraints without path validation", "properties": { "basic_constraints_valid": { "description": "Whether a basic constraints extension was parsed", "type": "boolean" }, "is_ca": { "description": "Certificate CA bit; not a trust result", "type": "boolean" }, "max_path_length": { "description": "Parsed path length, often -1 when absent", "minimum": -1, "type": "integer" }, "max_path_length_zero": { "description": "Whether an explicit zero path length was present", "type": "boolean" } }, "required": [ "basic_constraints_valid", "is_ca", "max_path_length", "max_path_length_zero" ], "type": "object" }, "extended_key_usage": { "description": "Normalized extended key usages and unknown OIDs", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 128, "type": "array" }, "fingerprint_sha256": { "description": "Colon-separated uppercase SHA-256 fingerprint of the exact DER bytes", "pattern": "^([0-9A-F]{2}:){31}[0-9A-F]{2}$", "type": "string" }, "issuer": { "description": "Printable issuer distinguished name", "type": "string" }, "issuer_rdns": { "description": "Ordered issuer relative distinguished names", "items": { "description": "One relative distinguished name set", "items": { "additionalProperties": false, "description": "One distinguished-name attribute", "properties": { "name": { "description": "Known stable attribute name or unknown", "type": "string" }, "oid": { "description": "Dotted-decimal attribute object identifier", "type": "string" }, "value": { "description": "Printable attribute value", "type": "string" } }, "required": [ "oid", "name", "value" ], "type": "object" }, "maxItems": 32, "type": "array" }, "maxItems": 128, "type": "array" }, "key_usage": { "description": "Normalized RFC 5280 key usage names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 9, "type": "array" }, "not_after": { "description": "Certificate validity upper bound", "format": "date-time", "type": "string" }, "not_before": { "description": "Certificate validity lower bound", "format": "date-time", "type": "string" }, "public_key": { "additionalProperties": false, "description": "Included public-key algorithm and size", "properties": { "algorithm": { "description": "Parsed public-key algorithm", "type": "string" }, "bits": { "description": "Public-key or curve bit size; zero only for an unsupported parsed type", "maximum": 16384, "minimum": 0, "type": "integer" } }, "required": [ "algorithm", "bits" ], "type": "object" }, "sans": { "additionalProperties": false, "description": "Caller-provided subject alternative names; URI values were not fetched", "properties": { "dns_names": { "description": "DNS subject alternative names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" }, "email_addresses": { "description": "Email subject alternative names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" }, "ip_addresses": { "description": "Canonical IP subject alternative names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" }, "uris": { "description": "URI subject alternative names; never fetched", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" } }, "required": [ "dns_names", "email_addresses", "ip_addresses", "uris" ], "type": "object" }, "serial_hex": { "description": "Certificate serial number in uppercase hexadecimal", "type": "string" }, "signature_algorithm": { "description": "Parsed certificate signature algorithm name", "type": "string" }, "subject": { "description": "Printable subject distinguished name", "type": "string" }, "subject_rdns": { "description": "Ordered subject relative distinguished names", "items": { "description": "One relative distinguished name set", "items": { "additionalProperties": false, "description": "One distinguished-name attribute", "properties": { "name": { "description": "Known stable attribute name or unknown", "type": "string" }, "oid": { "description": "Dotted-decimal attribute object identifier", "type": "string" }, "value": { "description": "Printable attribute value", "type": "string" } }, "required": [ "oid", "name", "value" ], "type": "object" }, "maxItems": 32, "type": "array" }, "maxItems": 128, "type": "array" } }, "required": [ "fingerprint_sha256", "serial_hex", "subject", "subject_rdns", "issuer", "issuer_rdns", "not_before", "not_after", "sans", "key_usage", "extended_key_usage", "public_key", "signature_algorithm", "constraints" ], "type": "object" }, "hostname": { "description": "Compared hostname, empty when not requested", "type": "string" }, "hostname_evaluated": { "description": "Whether hostname comparison was requested", "type": "boolean" }, "hostname_matches": { "description": "Standard name-matcher result; not a trust decision", "type": "boolean" }, "operation": { "const": "certificate-inspect", "description": "Stable operation name", "type": "string" }, "time_status": { "description": "Date-only status; not a trust decision", "enum": [ "not_yet_valid", "currently_valid", "expired" ], "type": "string" }, "warnings": { "description": "Trust and parsing limitations; never certificate trust conclusions", "items": { "description": "Human-readable warning", "type": "string" }, "maxItems": 8, "type": "array" } }, "required": [ "operation", "algorithm_version", "at_time", "hostname_evaluated", "hostname", "hostname_matches", "time_status", "certificate", "warnings" ], "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" }, "extensions": { "bazaar": { "category": "utilities", "info": { "input": { "body": { "at_time": "2024-06-01T12:00:00Z", "hostname": "api.example.test", "pem": "-----BEGIN CERTIFICATE-----\nMIIBmDCCAUqgAwIBAgICBAIwBQYDK2VwMEIxJTAjBgNVBAoTHHg0MDJBdGxhcyBT\neW50aGV0aWMgRXhhbXBsZXMxGTAXBgNVBAMTEGFwaS5leGFtcGxlLnRlc3QwHhcN\nMjQwMTAxMDAwMDAwWhcNMzQwMTAxMDAwMDAwWjBCMSUwIwYDVQQKExx4NDAyQXRs\nYXMgU3ludGhldGljIEV4YW1wbGVzMRkwFwYDVQQDExBhcGkuZXhhbXBsZS50ZXN0\nMCowBQYDK2VwAyEAebVWLo/mVPlAeLES6KmLp5AfhTrmlb7X4OORC60ElmSjZDBi\nMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8E\nAjAAMC0GA1UdEQQmMCSCEGFwaS5leGFtcGxlLnRlc3SCEHd3dy5leGFtcGxlLnRl\nc3QwBQYDK2VwA0EAD54hSK5TQKCStJ+erMx4HpqTTAX2eD7eGLZLNwr3DPtfRDfw\no9Lkli6ywIh515laMt/OM2lhcH6qFDZ1prqZDg==\n-----END CERTIFICATE-----\n" }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "algorithm_version": "x509-certificate-inspect-v1", "at_time": "2024-06-01T12:00:00Z", "certificate": { "constraints": { "basic_constraints_valid": true, "is_ca": false, "max_path_length": -1, "max_path_length_zero": false }, "extended_key_usage": [ "server_auth" ], "fingerprint_sha256": "17:D4:EE:92:E7:8A:61:99:72:9B:A2:F6:27:61:B0:20:ED:29:6A:1F:28:BD:BC:CC:07:35:4E:B2:EC:B9:BC:7D", "issuer": "CN=api.example.test,O=x402Atlas Synthetic Examples", "issuer_rdns": [ [ { "name": "organizationName", "oid": "2.5.4.10", "value": "x402Atlas Synthetic Examples" } ], [ { "name": "commonName", "oid": "2.5.4.3", "value": "api.example.test" } ] ], "key_usage": [ "digital_signature" ], "not_after": "2034-01-01T00:00:00Z", "not_before": "2024-01-01T00:00:00Z", "public_key": { "algorithm": "Ed25519", "bits": 256 }, "sans": { "dns_names": [ "api.example.test", "www.example.test" ], "email_addresses": [], "ip_addresses": [], "uris": [] }, "serial_hex": "402", "signature_algorithm": "Ed25519", "subject": "CN=api.example.test,O=x402Atlas Synthetic Examples", "subject_rdns": [ [ { "name": "organizationName", "oid": "2.5.4.10", "value": "x402Atlas Synthetic Examples" } ], [ { "name": "commonName", "oid": "2.5.4.3", "value": "api.example.test" } ] ] }, "hostname": "api.example.test", "hostname_evaluated": true, "hostname_matches": true, "operation": "certificate-inspect", "time_status": "currently_valid", "warnings": [ "Parsed structure, validity dates, and hostname comparison do not establish certificate trust, revocation status, key possession, identity, or suitability." ] }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "additionalProperties": false, "properties": { "at_time": { "description": "Required fixed RFC3339 instant used only for validity comparison", "format": "date-time", "type": "string" }, "hostname": { "description": "Optional hostname for the standard certificate name matcher", "maxLength": 253, "minLength": 1, "type": "string" }, "pem": { "description": "Exactly one PEM CERTIFICATE block; mutually exclusive with der_base64", "maxLength": 98304, "minLength": 1, "type": "string" } }, "required": [ "pem", "at_time", "hostname" ], "type": "object" }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "additionalProperties": false, "properties": { "_atlas": { "additionalProperties": false, "description": "Atlas documentation and related-route metadata added after deployment", "properties": { "docs": { "description": "Documentation URL for this bridge", "format": "uri", "maxLength": 512, "type": "string" }, "related": { "description": "Bounded related Atlas routes", "items": { "additionalProperties": false, "description": "One related Atlas route", "properties": { "bridge": { "description": "Related bridge name", "maxLength": 64, "type": "string" }, "docs": { "description": "Related bridge documentation URL", "format": "uri", "maxLength": 512, "type": "string" }, "summary": { "description": "Short capability summary", "maxLength": 256, "type": "string" }, "url": { "description": "Related route URL", "format": "uri", "maxLength": 512, "type": "string" } }, "required": [ "bridge", "url", "docs", "summary" ], "type": "object" }, "maxItems": 3, "type": "array" } }, "required": [ "docs" ], "type": "object" }, "algorithm_version": { "const": "x509-certificate-inspect-v1", "description": "Pinned certificate inspection contract", "type": "string" }, "at_time": { "description": "Applied validity comparison instant", "format": "date-time", "type": "string" }, "certificate": { "additionalProperties": false, "description": "Normalized RFC 5280 leaf certificate fields without a trust conclusion", "properties": { "constraints": { "additionalProperties": false, "description": "Parsed basic constraints without path validation", "properties": { "basic_constraints_valid": { "description": "Whether a basic constraints extension was parsed", "type": "boolean" }, "is_ca": { "description": "Certificate CA bit; not a trust result", "type": "boolean" }, "max_path_length": { "description": "Parsed path length, often -1 when absent", "minimum": -1, "type": "integer" }, "max_path_length_zero": { "description": "Whether an explicit zero path length was present", "type": "boolean" } }, "required": [ "basic_constraints_valid", "is_ca", "max_path_length", "max_path_length_zero" ], "type": "object" }, "extended_key_usage": { "description": "Normalized extended key usages and unknown OIDs", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 128, "type": "array" }, "fingerprint_sha256": { "description": "Colon-separated uppercase SHA-256 fingerprint of the exact DER bytes", "pattern": "^([0-9A-F]{2}:){31}[0-9A-F]{2}$", "type": "string" }, "issuer": { "description": "Printable issuer distinguished name", "type": "string" }, "issuer_rdns": { "description": "Ordered issuer relative distinguished names", "items": { "description": "One relative distinguished name set", "items": { "additionalProperties": false, "description": "One distinguished-name attribute", "properties": { "name": { "description": "Known stable attribute name or unknown", "type": "string" }, "oid": { "description": "Dotted-decimal attribute object identifier", "type": "string" }, "value": { "description": "Printable attribute value", "type": "string" } }, "required": [ "oid", "name", "value" ], "type": "object" }, "maxItems": 32, "type": "array" }, "maxItems": 128, "type": "array" }, "key_usage": { "description": "Normalized RFC 5280 key usage names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 9, "type": "array" }, "not_after": { "description": "Certificate validity upper bound", "format": "date-time", "type": "string" }, "not_before": { "description": "Certificate validity lower bound", "format": "date-time", "type": "string" }, "public_key": { "additionalProperties": false, "description": "Included public-key algorithm and size", "properties": { "algorithm": { "description": "Parsed public-key algorithm", "type": "string" }, "bits": { "description": "Public-key or curve bit size; zero only for an unsupported parsed type", "maximum": 16384, "minimum": 0, "type": "integer" } }, "required": [ "algorithm", "bits" ], "type": "object" }, "sans": { "additionalProperties": false, "description": "Caller-provided subject alternative names; URI values were not fetched", "properties": { "dns_names": { "description": "DNS subject alternative names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" }, "email_addresses": { "description": "Email subject alternative names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" }, "ip_addresses": { "description": "Canonical IP subject alternative names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" }, "uris": { "description": "URI subject alternative names; never fetched", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" } }, "required": [ "dns_names", "email_addresses", "ip_addresses", "uris" ], "type": "object" }, "serial_hex": { "description": "Certificate serial number in uppercase hexadecimal", "type": "string" }, "signature_algorithm": { "description": "Parsed certificate signature algorithm name", "type": "string" }, "subject": { "description": "Printable subject distinguished name", "type": "string" }, "subject_rdns": { "description": "Ordered subject relative distinguished names", "items": { "description": "One relative distinguished name set", "items": { "additionalProperties": false, "description": "One distinguished-name attribute", "properties": { "name": { "description": "Known stable attribute name or unknown", "type": "string" }, "oid": { "description": "Dotted-decimal attribute object identifier", "type": "string" }, "value": { "description": "Printable attribute value", "type": "string" } }, "required": [ "oid", "name", "value" ], "type": "object" }, "maxItems": 32, "type": "array" }, "maxItems": 128, "type": "array" } }, "required": [ "fingerprint_sha256", "serial_hex", "subject", "subject_rdns", "issuer", "issuer_rdns", "not_before", "not_after", "sans", "key_usage", "extended_key_usage", "public_key", "signature_algorithm", "constraints" ], "type": "object" }, "hostname": { "description": "Compared hostname, empty when not requested", "type": "string" }, "hostname_evaluated": { "description": "Whether hostname comparison was requested", "type": "boolean" }, "hostname_matches": { "description": "Standard name-matcher result; not a trust decision", "type": "boolean" }, "operation": { "const": "certificate-inspect", "description": "Stable operation name", "type": "string" }, "time_status": { "description": "Date-only status; not a trust decision", "enum": [ "not_yet_valid", "currently_valid", "expired" ], "type": "string" }, "warnings": { "description": "Trust and parsing limitations; never certificate trust conclusions", "items": { "description": "Human-readable warning", "type": "string" }, "maxItems": 8, "type": "array" } }, "required": [ "operation", "algorithm_version", "at_time", "hostname_evaluated", "hostname", "hostname_matches", "time_status", "certificate", "warnings" ], "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" }, "tags": [ "x509-certificate", "tls-certificate", "certificate-fingerprint", "hostname-match", "rfc5280" ] } }, "tags": [ "x509-certificate", "tls-certificate", "certificate-fingerprint", "hostname-match", "rfc5280", "bazaar" ], "sourceHost": "artifact-inspector.use.x402atlas.com", "lastUpdated": "2026-10-06T03:36:19.751Z", "quality": { "calls30d": 3, "uniquePayers30d": 2, "lastCalledAt": "2026-10-06T03:36:19.61Z" }, "metadata": { "serviceName": "Artifact Inspector", "extensions": { "bazaar": { "category": "utilities", "info": { "input": { "body": { "at_time": "2024-06-01T12:00:00Z", "hostname": "api.example.test", "pem": "-----BEGIN CERTIFICATE-----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\no9Lkli6ywIh515laMt/OM2lhcH6qFDZ1prqZDg==\n-----END CERTIFICATE-----\n" }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "algorithm_version": "x509-certificate-inspect-v1", "at_time": "2024-06-01T12:00:00Z", "certificate": { "constraints": { "basic_constraints_valid": true, "is_ca": false, "max_path_length": -1, "max_path_length_zero": false }, "extended_key_usage": [ "server_auth" ], "fingerprint_sha256": "17:D4:EE:92:E7:8A:61:99:72:9B:A2:F6:27:61:B0:20:ED:29:6A:1F:28:BD:BC:CC:07:35:4E:B2:EC:B9:BC:7D", "issuer": "CN=api.example.test,O=x402Atlas Synthetic Examples", "issuer_rdns": [ [ { "name": "organizationName", "oid": "2.5.4.10", "value": "x402Atlas Synthetic Examples" } ], [ { "name": "commonName", "oid": "2.5.4.3", "value": "api.example.test" } ] ], "key_usage": [ "digital_signature" ], "not_after": "2034-01-01T00:00:00Z", "not_before": "2024-01-01T00:00:00Z", "public_key": { "algorithm": "Ed25519", "bits": 256 }, "sans": { "dns_names": [ "api.example.test", "www.example.test" ], "email_addresses": [], "ip_addresses": [], "uris": [] }, "serial_hex": "402", "signature_algorithm": "Ed25519", "subject": "CN=api.example.test,O=x402Atlas Synthetic Examples", "subject_rdns": [ [ { "name": "organizationName", "oid": "2.5.4.10", "value": "x402Atlas Synthetic Examples" } ], [ { "name": "commonName", "oid": "2.5.4.3", "value": "api.example.test" } ] ] }, "hostname": "api.example.test", "hostname_evaluated": true, "hostname_matches": true, "operation": "certificate-inspect", "time_status": "currently_valid", "warnings": [ "Parsed structure, validity dates, and hostname comparison do not establish certificate trust, revocation status, key possession, identity, or suitability." ] }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "additionalProperties": false, "properties": { "at_time": { "description": "Required fixed RFC3339 instant used only for validity comparison", "format": "date-time", "type": "string" }, "hostname": { "description": "Optional hostname for the standard certificate name matcher", "maxLength": 253, "minLength": 1, "type": "string" }, "pem": { "description": "Exactly one PEM CERTIFICATE block; mutually exclusive with der_base64", "maxLength": 98304, "minLength": 1, "type": "string" } }, "required": [ "pem", "at_time", "hostname" ], "type": "object" }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "additionalProperties": false, "properties": { "_atlas": { "additionalProperties": false, "description": "Atlas documentation and related-route metadata added after deployment", "properties": { "docs": { "description": "Documentation URL for this bridge", "format": "uri", "maxLength": 512, "type": "string" }, "related": { "description": "Bounded related Atlas routes", "items": { "additionalProperties": false, "description": "One related Atlas route", "properties": { "bridge": { "description": "Related bridge name", "maxLength": 64, "type": "string" }, "docs": { "description": "Related bridge documentation URL", "format": "uri", "maxLength": 512, "type": "string" }, "summary": { "description": "Short capability summary", "maxLength": 256, "type": "string" }, "url": { "description": "Related route URL", "format": "uri", "maxLength": 512, "type": "string" } }, "required": [ "bridge", "url", "docs", "summary" ], "type": "object" }, "maxItems": 3, "type": "array" } }, "required": [ "docs" ], "type": "object" }, "algorithm_version": { "const": "x509-certificate-inspect-v1", "description": "Pinned certificate inspection contract", "type": "string" }, "at_time": { "description": "Applied validity comparison instant", "format": "date-time", "type": "string" }, "certificate": { "additionalProperties": false, "description": "Normalized RFC 5280 leaf certificate fields without a trust conclusion", "properties": { "constraints": { "additionalProperties": false, "description": "Parsed basic constraints without path validation", "properties": { "basic_constraints_valid": { "description": "Whether a basic constraints extension was parsed", "type": "boolean" }, "is_ca": { "description": "Certificate CA bit; not a trust result", "type": "boolean" }, "max_path_length": { "description": "Parsed path length, often -1 when absent", "minimum": -1, "type": "integer" }, "max_path_length_zero": { "description": "Whether an explicit zero path length was present", "type": "boolean" } }, "required": [ "basic_constraints_valid", "is_ca", "max_path_length", "max_path_length_zero" ], "type": "object" }, "extended_key_usage": { "description": "Normalized extended key usages and unknown OIDs", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 128, "type": "array" }, "fingerprint_sha256": { "description": "Colon-separated uppercase SHA-256 fingerprint of the exact DER bytes", "pattern": "^([0-9A-F]{2}:){31}[0-9A-F]{2}$", "type": "string" }, "issuer": { "description": "Printable issuer distinguished name", "type": "string" }, "issuer_rdns": { "description": "Ordered issuer relative distinguished names", "items": { "description": "One relative distinguished name set", "items": { "additionalProperties": false, "description": "One distinguished-name attribute", "properties": { "name": { "description": "Known stable attribute name or unknown", "type": "string" }, "oid": { "description": "Dotted-decimal attribute object identifier", "type": "string" }, "value": { "description": "Printable attribute value", "type": "string" } }, "required": [ "oid", "name", "value" ], "type": "object" }, "maxItems": 32, "type": "array" }, "maxItems": 128, "type": "array" }, "key_usage": { "description": "Normalized RFC 5280 key usage names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 9, "type": "array" }, "not_after": { "description": "Certificate validity upper bound", "format": "date-time", "type": "string" }, "not_before": { "description": "Certificate validity lower bound", "format": "date-time", "type": "string" }, "public_key": { "additionalProperties": false, "description": "Included public-key algorithm and size", "properties": { "algorithm": { "description": "Parsed public-key algorithm", "type": "string" }, "bits": { "description": "Public-key or curve bit size; zero only for an unsupported parsed type", "maximum": 16384, "minimum": 0, "type": "integer" } }, "required": [ "algorithm", "bits" ], "type": "object" }, "sans": { "additionalProperties": false, "description": "Caller-provided subject alternative names; URI values were not fetched", "properties": { "dns_names": { "description": "DNS subject alternative names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" }, "email_addresses": { "description": "Email subject alternative names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" }, "ip_addresses": { "description": "Canonical IP subject alternative names", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" }, "uris": { "description": "URI subject alternative names; never fetched", "items": { "description": "Normalized string value", "type": "string" }, "maxItems": 256, "type": "array" } }, "required": [ "dns_names", "email_addresses", "ip_addresses", "uris" ], "type": "object" }, "serial_hex": { "description": "Certificate serial number in uppercase hexadecimal", "type": "string" }, "signature_algorithm": { "description": "Parsed certificate signature algorithm name", "type": "string" }, "subject": { "description": "Printable subject distinguished name", "type": "string" }, "subject_rdns": { "description": "Ordered subject relative distinguished names", "items": { "description": "One relative distinguished name set", "items": { "additionalProperties": false, "description": "One distinguished-name attribute", "properties": { "name": { "description": "Known stable attribute name or unknown", "type": "string" }, "oid": { "description": "Dotted-decimal attribute object identifier", "type": "string" }, "value": { "description": "Printable attribute value", "type": "string" } }, "required": [ "oid", "name", "value" ], "type": "object" }, "maxItems": 32, "type": "array" }, "maxItems": 128, "type": "array" } }, "required": [ "fingerprint_sha256", "serial_hex", "subject", "subject_rdns", "issuer", "issuer_rdns", "not_before", "not_after", "sans", "key_usage", "extended_key_usage", "public_key", "signature_algorithm", "constraints" ], "type": "object" }, "hostname": { "description": "Compared hostname, empty when not requested", "type": "string" }, "hostname_evaluated": { "description": "Whether hostname comparison was requested", "type": "boolean" }, "hostname_matches": { "description": "Standard name-matcher result; not a trust decision", "type": "boolean" }, "operation": { "const": "certificate-inspect", "description": "Stable operation name", "type": "string" }, "time_status": { "description": "Date-only status; not a trust decision", "enum": [ "not_yet_valid", "currently_valid", "expired" ], "type": "string" }, "warnings": { "description": "Trust and parsing limitations; never certificate trust conclusions", "items": { "description": "Human-readable warning", "type": "string" }, "maxItems": 8, "type": "array" } }, "required": [ "operation", "algorithm_version", "at_time", "hostname_evaluated", "hostname", "hostname_matches", "time_status", "certificate", "warnings" ], "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" }, "tags": [ "x509-certificate", "tls-certificate", "certificate-fingerprint", "hostname-match", "rfc5280" ] } } }, "liveness": { "reliability": null }, "verified": false, "featured": false, "provider": { "host": "artifact-inspector.use.x402atlas.com", "manifest_name": "artifact-inspector.use.x402atlas.com", "source": "cdp-mirror", "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources", "submitted_at": "2026-10-14T01:15:01.050Z" }, "exampleResponse": { "example": { "_atlas": { "docs": "https://example.com", "related": [ { "bridge": "string", "docs": "https://example.com", "summary": "string", "url": "https://example.com" } ] }, "algorithm_version": "string", "at_time": "2026-01-01T00:00:00Z", "certificate": { "constraints": { "basic_constraints_valid": true, "is_ca": true, "max_path_length": 0, "max_path_length_zero": true }, "extended_key_usage": [ "string" ], "fingerprint_sha256": "string", "issuer": "string", "issuer_rdns": [ [ { "name": "string", "oid": "string", "value": "string" } ] ], "key_usage": [ "string" ], "not_after": "2026-01-01T00:00:00Z", "not_before": "2026-01-01T00:00:00Z", "public_key": { "algorithm": "string", "bits": 0 }, "sans": { "dns_names": [ "string" ], "email_addresses": [ "string" ], "ip_addresses": [ "string" ], "uris": [ "string" ] }, "serial_hex": "string", "signature_algorithm": "string", "subject": "string", "subject_rdns": [ [ { "name": "string", "oid": "string", "value": "string" } ] ] }, "hostname": "string", "hostname_evaluated": true, "hostname_matches": true, "operation": "string", "time_status": "not_yet_valid", "warnings": [ "string" ] }, "type": "string" } }