X
X.509 TLS/SSL certificate inspector — parse fields and SANs, calculate a SHA-256 fingerprint, and check hostname and time validity without trust or revocation claims.
5000 (raw units)
price
2
calls / 30d
1
unique payers
2026-09-15
updated
Provider
artifact-inspector.use.x402atlas.com · discovered, not yet claimed by its owner
Payment (x402 accepts[])
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "5000",
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "eip155:137",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"amount": "5000",
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "eip155:42161",
"payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"amount": "5000",
"maxTimeoutSeconds": 300
}
]Output schema
{
"bazaar": {
"category": "utilities",
"info": {
"input": {
"body": {
"at_time": "2024-06-01T12:00:00Z",
"hostname": "api.example.test",
"pem": "-----BEGIN CERTIFICATE-----\nMIIBmDCCAUqgAwIBAgICBAIwBQYDK2VwMEIxJTAjBgNVBAoTHHg0MDJBdGxhcyBT\neW50aGV0aWMgRXhhbXBsZXMxGTAXBgNVBAMTEGFwaS5leGFtcGxlLnRlc3QwHhcN\nMjQwMTAxMDAwMDAwWhcNMzQwMTAxMDAwMDAwWjBCMSUwIwYDVQQKExx4NDAyQXRs\nYXMgU3ludGhldGljIEV4YW1wbGVzMRkwFwYDVQQDExBhcGkuZXhhbXBsZS50ZXN0\nMCowBQYDK2VwAyEAebVWLo/mVPlAeLES6KmLp5AfhTrmlb7X4OORC60ElmSjZDBi\nMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8E\nAjAAMC0GA1UdEQQmMCSCEGFwaS5leGFtcGxlLnRlc3SCEHd3dy5leGFtcGxlLnRl\nc3QwBQYDK2VwA0EAD54hSK5TQKCStJ+erMx4HpqTTAX2eD7eGLZLNwr3DPtfRDfw\no9Lkli6ywIh515laMt/OM2lhcH6qFDZ1prqZDg==\n-----END CERTIFICATE-----\n"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"algorithm_version": "x509-certificate-inspect-v1",
"at_time": "2024-06-01T12:00:00Z",
"certificate": {
"constraints": {
"basic_constraints_valid": true,
"is_ca": false,
"max_path_length": -1,
"max_path_length_zero": false
},
"extended_key_usage": [
"server_auth"
],
"fingerprint_sha256": "17:D4:EE:92:E7:8A:61:99:72:9B:A2:F6:27:61:B0:20:ED:29:6A:1F:28:BD:BC:CC:07:35:4E:B2:EC:B9:BC:7D",
"issuer": "CN=api.example.test,O=x402Atlas Synthetic Examples",
"issuer_rdns": [
[
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "x402Atlas Synthetic Examples"
}
],
[
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "api.example.test"
}
]
],
"key_usage": [
"digital_signature"
],
"not_after": "2034-01-01T00:00:00Z",
"not_before": "2024-01-01T00:00:00Z",
"public_key": {
"algorithm": "Ed25519",
"bits": 256
},
"sans": {
"dns_names": [
"api.example.test",
"www.example.test"
],
"email_addresses": [],
"ip_addresses": [],
"uris": []
},
"serial_hex": "402",
"signature_algorithm": "Ed25519",
"subject": "CN=api.example.test,O=x402Atlas Synthetic Examples",
"subject_rdns": [
[
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "x402Atlas Synthetic Examples"
}
],
[
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "api.example.test"
}
]
]
},
"hostname": "api.example.test",
"hostname_evaluated": true,
"hostname_matches": true,
"operation": "certificate-inspect",
"time_status": "currently_valid",
"warnings": [
"Parsed structure, validity dates, and hostname comparison do not establish certificate trust, revocation status, key possession, identity, or suitability."
]
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"at_time": {
"description": "Required fixed RFC3339 instant used only for validity comparison",
"format": "date-time",
"type": "string"
},
"hostname": {
"description": "Optional hostname for the standard certificate name matcher",
"maxLength": 253,
"minLength": 1,
"type": "string"
},
"pem": {
"description": "Exactly one PEM CERTIFICATE block; mutually exclusive with der_base64",
"maxLength": 98304,
"minLength": 1,
"type": "string"
}
},
"required": [
"pem",
"at_time",
"hostname"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"_atlas": {
"additionalProperties": false,
"description": "Atlas documentation and related-route metadata added after deployment",
"properties": {
"docs": {
"description": "Documentation URL for this bridge",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"related": {
"description": "Bounded related Atlas routes",
"items": {
"additionalProperties": false,
"description": "One related Atlas route",
"properties": {
"bridge": {
"description": "Related bridge name",
"maxLength": 64,
"type": "string"
},
"docs": {
"description": "Related bridge documentation URL",
"format": "uri",
"maxLength": 512,
"type": "string"
},
"summary": {
"description": "Short capability summary",
"maxLength": 256,
"type": "string"
},
"url": {
"description": "Related route URL",
"format": "uri",
"maxLength": 512,
"type": "string"
}
},
"required": [
"bridge",
"url",
"docs",
"summary"
],
"type": "object"
},
"maxItems": 3,
"type": "array"
}
},
"required": [
"docs"
],
"type": "object"
},
"algorithm_version": {
"const": "x509-certificate-inspect-v1",
"description": "Pinned certificate inspection contract",
"type": "string"
},
"at_time": {
"description": "Applied validity comparison instant",
"format": "date-time",
"type": "string"
},
"certificate": {
"additionalProperties": false,
"description": "Normalized RFC 5280 leaf certificate fields without a trust conclusion",
"properties": {
"constraints": {
"additionalProperties": false,
"description": "Parsed basic constraints without path validation",
"properties": {
"basic_constraints_valid": {
"description": "Whether a basic constraints extension was parsed",
"type": "boolean"
},
"is_ca": {
"description": "Certificate CA bit; not a trust result",
"type": "boolean"
},
"max_path_length": {
"description": "Parsed path length, often -1 when absent",
"minimum": -1,
"type": "integer"
},
"max_path_length_zero": {
"description": "Whether an explicit zero path length was present",
"type": "boolean"
}
},
"required": [
"basic_constraints_valid",
"is_ca",
"max_path_length",
"max_path_length_zero"
],
"type": "object"
},
"extended_key_usage": {
"description": "Normalized extended key usages and unknown OIDs",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 128,
"type": "array"
},
"fingerprint_sha256": {
"description": "Colon-separated uppercase SHA-256 fingerprint of the exact DER bytes",
"pattern": "^([0-9A-F]{2}:){31}[0-9A-F]{2}$",
"type": "string"
},
"issuer": {
"description": "Printable issuer distinguished name",
"type": "string"
},
"issuer_rdns": {
"description": "Ordered issuer relative distinguished names",
"items": {
"description": "One relative distinguished name set",
"items": {
"additionalProperties": false,
"description": "One distinguished-name attribute",
"properties": {
"name": {
"description": "Known stable attribute name or unknown",
"type": "string"
},
"oid": {
"description": "Dotted-decimal attribute object identifier",
"type": "string"
},
"value": {
"description": "Printable attribute value",
"type": "string"
}
},
"required": [
"oid",
"name",
"value"
],
"type": "object"
},
"maxItems": 32,
"type": "array"
},
"maxItems": 128,
"type": "array"
},
"key_usage": {
"description": "Normalized RFC 5280 key usage names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 9,
"type": "array"
},
"not_after": {
"description": "Certificate validity upper bound",
"format": "date-time",
"type": "string"
},
"not_before": {
"description": "Certificate validity lower bound",
"format": "date-time",
"type": "string"
},
"public_key": {
"additionalProperties": false,
"description": "Included public-key algorithm and size",
"properties": {
"algorithm": {
"description": "Parsed public-key algorithm",
"type": "string"
},
"bits": {
"description": "Public-key or curve bit size; zero only for an unsupported parsed type",
"maximum": 16384,
"minimum": 0,
"type": "integer"
}
},
"required": [
"algorithm",
"bits"
],
"type": "object"
},
"sans": {
"additionalProperties": false,
"description": "Caller-provided subject alternative names; URI values were not fetched",
"properties": {
"dns_names": {
"description": "DNS subject alternative names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
},
"email_addresses": {
"description": "Email subject alternative names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
},
"ip_addresses": {
"description": "Canonical IP subject alternative names",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
},
"uris": {
"description": "URI subject alternative names; never fetched",
"items": {
"description": "Normalized string value",
"type": "string"
},
"maxItems": 256,
"type": "array"
}
},
"required": [
"dns_names",
"email_addresses",
"ip_addresses",
"uris"
],
"type": "object"
},
"serial_hex": {
"description": "Certificate serial number in uppercase hexadecimal",
"type": "string"
},
"signature_algorithm": {
"description": "Parsed certificate signature algorithm name",
"type": "string"
},
"subject": {
"description": "Printable subject distinguished name",
"type": "string"
},
"subject_rdns": {
"description": "Ordered subject relative distinguished names",
"items": {
"description": "One relative distinguished name set",
"items": {
"additionalProperties": false,
"description": "One distinguished-name attribute",
"properties": {
"name": {
"description": "Known stable attribute name or unknown",
"type": "string"
},
"oid": {
"description": "Dotted-decimal attribute object identifier",
"type": "string"
},
"value": {
"description": "Printable attribute value",
"type": "string"
}
},
"required": [
"oid",
"name",
"value"
],
"type": "object"
},
"maxItems": 32,
"type": "array"
},
"maxItems": 128,
"type": "array"
}
},
"required": [
"fingerprint_sha256",
"serial_hex",
"subject",
"subject_rdns",
"issuer",
"issuer_rdns",
"not_before",
"not_after",
"sans",
"key_usage",
"extended_key_usage",
"public_key",
"signature_algorithm",
"constraints"
],
"type": "object"
},
"hostname": {
"description": "Compared hostname, empty when not requested",
"type": "string"
},
"hostname_evaluated": {
"description": "Whether hostname comparison was requested",
"type": "boolean"
},
"hostname_matches": {
"description": "Standard name-matcher result; not a trust decision",
"type": "boolean"
},
"operation": {
"const": "certificate-inspect",
"description": "Stable operation name",
"type": "string"
},
"time_status": {
"description": "Date-only status; not a trust decision",
"enum": [
"not_yet_valid",
"currently_valid",
"expired"
],
"type": "string"
},
"warnings": {
"description": "Trust and parsing limitations; never certificate trust conclusions",
"items": {
"description": "Human-readable warning",
"type": "string"
},
"maxItems": 8,
"type": "array"
}
},
"required": [
"operation",
"algorithm_version",
"at_time",
"hostname_evaluated",
"hostname",
"hostname_matches",
"time_status",
"certificate",
"warnings"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
},
"tags": [
"x509-certificate",
"tls-certificate",
"certificate-fingerprint",
"hostname-match",
"rfc5280"
]
}
}Use it
curl
curl "https://artifact-inspector.use.x402atlas.com/certificate" # -> 402 Payment Required, accepts[] lists how to pay # retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paid
JavaScript
const res = await fetch("https://artifact-inspector.use.x402atlas.com/certificate");
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}Python
import httpx
res = httpx.get("https://artifact-inspector.use.x402atlas.com/certificate")
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerMachine-readable
Everything on this page is also available as clean JSON at /resources/3454.json, and this resource appears in /discovery/resources and /discovery/search.