PKCS#10 certificate signing request (CSR) inspector — parse requested identities and publi
PKCS#10 certificate signing request (CSR) inspector — parse requested identities and public-key metadata, calculate a fingerprint, and check the included self-signature without CA approval claims.
5000 (raw units)
price
2
calls / 30d
1
unique payers
2026-09-15
updated
Provider
artifact-inspector.use.x402atlas.com · discovered, not yet claimed by its owner
Payment (x402 accepts[])
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "5000",
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "eip155:137",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"amount": "5000",
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "eip155:42161",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"amount": "5000",
"maxTimeoutSeconds": 300
}
]Output schema
{
"bazaar": {
"category": "utilities",
"info": {
"input": {
"body": {
"pem": "-----BEGIN CERTIFICATE REQUEST-----\nMIIBCjCBvQIBADBGMSUwIwYDVQQKExx4NDAyQXRsYXMgU3ludGhldGljIEV4YW1w\nbGVzMR0wGwYDVQQDExRzZXJ2aWNlLmV4YW1wbGUudGVzdDAqMAUGAytlcAMhAHm1\nVi6P5lT5QHixEuipi6eQH4U65pW+1+DjkQutBJZkoEQwQgYJKoZIhvcNAQkOMTUw\nMzAxBgNVHREEKjAoghRzZXJ2aWNlLmV4YW1wbGUudGVzdIIQYXBpLmV4YW1wbGUu\ndGVzdDAFBgMrZXADQQBSNLlAOUHeVlbhnQE+VCg5pvxbKEdQYfLO4egstCTlMYDv\neA4dF/Bwz0dTGJt38ORmedOR1Z9gyoFAPWHaMr4M\n-----END CERTIFICATE REQUEST-----\n"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"algorithm_version": "pkcs10-csr-inspect-v1",
"csr": {
"fingerprint_sha256": "A0:99:82:7B:37:CA:52:40:D4:D1:C5:D9:17:DB:70:47:AA:DE:D7:64:CA:48:5E:26:6A:7C:A1:4D:AC:46:87:AA",
"public_key": {
"algorithm": "Ed25519",
"bits": 256
},
"requested_extensions": [
{
"critical": false,
"oid": "2.5.29.17"
}
],
"sans": {
"dns_names": [
"service.example.test",
"api.example.test"
],
"email_addresses": [],
"ip_addresses": [],
"uris": []
},
"signature_algorithm": "Ed25519",
"signature_valid": true,
"subject": "CN=service.example.test,O=x402Atlas Synthetic Examples",
"subject_rdns": [
[
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "x402Atlas Synthetic Examples"
}
],
[
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "service.example.test"
}
]
]
},
"operation": "csr-inspect",
"warnings": [
"A valid CSR self-signature proves only internal possession of the included key, not identity, trust, CA approval, or certificate issuance."
]
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"pem": {
"description": "Exactly one PEM CERTIFICATE REQUEST block; mutually exclusive with der_base64",
"maxLength": 98304,
"minLength": 1,
"type": "string"
}
},
"required": [
"pem"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"_atlas": {
"additionalProperties": false,
"description": "Atlas documentation and related-route metadata added after deployment",
"properties": {
"docs": {
"description": "Documentation URL for this bridge",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"related": {
"description": "Bounded related Atlas routes",
"items": {
"additionalProperties": false,
"description": "One related Atlas route",
"properties": {
"bridge": {
"description": "Related bridge name",
"maxLength": 64,
"type": "string"
},
"docs": {
"description": "Related bridge documentation URL",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"summary": {
"description": "Short capability summary",
"maxLength": 256,
"type": "string"
},
"url": {
"description": "Related route URL",
"format": "uri",
"maxLength": 512,
"type": "string"
}
},
"required": [
"bridge",
"url",
"docs",
"summary"
],
"type": "object"
},
"maxItems": 3,
"type": "array"
}
},
"required": [
"docs"
],
"type": "object"
},
"algorithm_version": {
"const": "pkcs10-csr-inspect-v1",
"description": "Pinned CSR inspection contract",
"type": "string"
},
"csr": {
"additionalProperties": false,
"description": "Normalized PKCS#10 request fields and included self-signature result",
"properties": {
"fingerprint_sha256": {
"description": "Colon-separated uppercase SHA-256 fingerprint of the exact DER bytes",
"pattern": "^([0-9A-F]{2}:){31}[0-9A-F]{2}$",
"type": "string"
},
"public_key": {
"additionalProperties": false,
"description": "Included public-key algorithm and size",
"properties": {
"algorithm": {
"description": "Parsed public-key algorithm",
"type": "string"
},
"bits": {
"description": "Public-key or curve bit size; zero only for an unsupported parsed type",
"maximum": 16384,
"minimum": 0,
"type": "integer"
}
},
"required": [
"algorithm",
"bits"
],
"type": "object"
},
"requested_extensions": {
"description": "Requested extension identifiers in deterministic OID order",
"items": {
"additionalProperties": false,
"description": "One requested extension identifier without raw extension bytes",
"properties": {
"critical": {
"description": "Whether the requested extension is marked critical",
"type": "boolean"
},
"oid": {
"description": "Dotted-decimal extension object identifier",
"type": "string"
}
},
"required": [
"oid",
"critical"
],
"type": "object"
},
"maxItems": 128,
"type": "array"
},
"sans": {
"additionalProperties": false,
"description": "Caller-provided subject alternative names; URI values were not fetched",
"properties": {
"dns_names": {
"description": "DNS subject alternative names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
},
"email_addresses": {
"description": "Email subject alternative names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
},
"ip_addresses": {
"description": "Canonical IP subject alternative names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
},
"uris": {
"description": "URI subject alternative names; never fetched",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
}
},
"required": [
"dns_names",
"email_addresses",
"ip_addresses",
"uris"
],
"type": "object"
},
"signature_algorithm": {
"description": "Parsed CSR self-signature algorithm name",
"type": "string"
},
"signature_valid": {
"description": "Whether the CSR self-signature verifies under its included key; not an identity or approval result",
"type": "boolean"
},
"subject": {
"description": "Printable requested subject distinguished name",
"type": "string"
},
"subject_rdns": {
"description": "Ordered requested subject relative distinguished names",
"items": {
"description": "One relative distinguished name set",
"items": {
"additionalProperties": false,
"description": "One distinguished-name attribute",
"properties": {
"name": {
"description": "Known stable attribute name or unknown",
"type": "string"
},
"oid": {
"description": "Dotted-decimal attribute object identifier",
"type": "string"
},
"value": {
"description": "Printable attribute value",
"type": "string"
}
},
"required": [
"oid",
"name",
"value"
],
"type": "object"
},
"maxItems": 32,
"type": "array"
},
"maxItems": 128,
"type": "array"
}
},
"required": [
"fingerprint_sha256",
"subject",
"subject_rdns",
"sans",
"requested_extensions",
"public_key",
"signature_algorithm",
"signature_valid"
],
"type": "object"
},
"operation": {
"const": "csr-inspect",
"description": "Stable operation name",
"type": "string"
},
"warnings": {
"description": "Trust and identity limitations",
"items": {
"description": "Human-readable warning",
"type": "string"
},
"maxItems": 8,
"type": "array"
}
},
"required": [
"operation",
"algorithm_version",
"csr",
"warnings"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
},
"tags": [
"csr-parser",
"pkcs10",
"certificate-request",
"signature-check",
"x509"
]
}
}Use it
curl
curl "https://artifact-inspector.use.x402atlas.com/csr" # -> 402 Payment Required, accepts[] lists how to pay # retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paid
JavaScript
const res = await fetch("https://artifact-inspector.use.x402atlas.com/csr");
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}Python
import httpx
res = httpx.get("https://artifact-inspector.use.x402atlas.com/csr")
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerMachine-readable
Everything on this page is also available as clean JSON at /resources/3453.json, and this resource appears in /discovery/resources and /discovery/search.