{
  "x402Version": 2,
  "id": 3454,
  "slug": "3454",
  "resource": "https://artifact-inspector.use.x402atlas.com/certificate",
  "description": "X.509 TLS/SSL certificate inspector — parse fields and SANs, calculate a SHA-256 fingerprint, and check hostname and time validity without trust or revocation claims.",
  "type": "http",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "5000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:137",
      "payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
      "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
      "amount": "5000",
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "eip155:42161",
      "payTo": "0x8C128f1Ee62Bb5e47867CfbAe2ad89be325Df1b2",
      "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
      "amount": "5000",
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "bazaar": {
      "category": "utilities",
      "info": {
        "input": {
          "body": {
            "at_time": "2024-06-01T12:00:00Z",
            "hostname": "api.example.test",
            "pem": "-----BEGIN CERTIFICATE-----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\no9Lkli6ywIh515laMt/OM2lhcH6qFDZ1prqZDg==\n-----END CERTIFICATE-----\n"
          },
          "bodyType": "json",
          "method": "POST",
          "type": "http"
        },
        "output": {
          "example": {
            "algorithm_version": "x509-certificate-inspect-v1",
            "at_time": "2024-06-01T12:00:00Z",
            "certificate": {
              "constraints": {
                "basic_constraints_valid": true,
                "is_ca": false,
                "max_path_length": -1,
                "max_path_length_zero": false
              },
              "extended_key_usage": [
                "server_auth"
              ],
              "fingerprint_sha256": "17:D4:EE:92:E7:8A:61:99:72:9B:A2:F6:27:61:B0:20:ED:29:6A:1F:28:BD:BC:CC:07:35:4E:B2:EC:B9:BC:7D",
              "issuer": "CN=api.example.test,O=x402Atlas Synthetic Examples",
              "issuer_rdns": [
                [
                  {
                    "name": "organizationName",
                    "oid": "2.5.4.10",
                    "value": "x402Atlas Synthetic Examples"
                  }
                ],
                [
                  {
                    "name": "commonName",
                    "oid": "2.5.4.3",
                    "value": "api.example.test"
                  }
                ]
              ],
              "key_usage": [
                "digital_signature"
              ],
              "not_after": "2034-01-01T00:00:00Z",
              "not_before": "2024-01-01T00:00:00Z",
              "public_key": {
                "algorithm": "Ed25519",
                "bits": 256
              },
              "sans": {
                "dns_names": [
                  "api.example.test",
                  "www.example.test"
                ],
                "email_addresses": [],
                "ip_addresses": [],
                "uris": []
              },
              "serial_hex": "402",
              "signature_algorithm": "Ed25519",
              "subject": "CN=api.example.test,O=x402Atlas Synthetic Examples",
              "subject_rdns": [
                [
                  {
                    "name": "organizationName",
                    "oid": "2.5.4.10",
                    "value": "x402Atlas Synthetic Examples"
                  }
                ],
                [
                  {
                    "name": "commonName",
                    "oid": "2.5.4.3",
                    "value": "api.example.test"
                  }
                ]
              ]
            },
            "hostname": "api.example.test",
            "hostname_evaluated": true,
            "hostname_matches": true,
            "operation": "certificate-inspect",
            "time_status": "currently_valid",
            "warnings": [
              "Parsed structure, validity dates, and hostname comparison do not establish certificate trust, revocation status, key possession, identity, or suitability."
            ]
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "body": {
                "additionalProperties": false,
                "properties": {
                  "at_time": {
                    "description": "Required fixed RFC3339 instant used only for validity comparison",
                    "format": "date-time",
                    "type": "string"
                  },
                  "hostname": {
                    "description": "Optional hostname for the standard certificate name matcher",
                    "maxLength": 253,
                    "minLength": 1,
                    "type": "string"
                  },
                  "pem": {
                    "description": "Exactly one PEM CERTIFICATE block; mutually exclusive with der_base64",
                    "maxLength": 98304,
                    "minLength": 1,
                    "type": "string"
                  }
                },
                "required": [
                  "pem",
                  "at_time",
                  "hostname"
                ],
                "type": "object"
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              },
              "method": {
                "enum": [
                  "POST"
                ],
                "type": "string"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "additionalProperties": false,
                "properties": {
                  "_atlas": {
                    "additionalProperties": false,
                    "description": "Atlas documentation and related-route metadata added after deployment",
                    "properties": {
                      "docs": {
                        "description": "Documentation URL for this bridge",
                        "format": "uri",
                        "maxLength": 512,
                        "type": "string"
                      },
                      "related": {
                        "description": "Bounded related Atlas routes",
                        "items": {
                          "additionalProperties": false,
                          "description": "One related Atlas route",
                          "properties": {
                            "bridge": {
                              "description": "Related bridge name",
                              "maxLength": 64,
                              "type": "string"
                            },
                            "docs": {
                              "description": "Related bridge documentation URL",
                              "format": "uri",
                              "maxLength": 512,
                              "type": "string"
                            },
                            "summary": {
                              "description": "Short capability summary",
                              "maxLength": 256,
                              "type": "string"
                            },
                            "url": {
                              "description": "Related route URL",
                              "format": "uri",
                              "maxLength": 512,
                              "type": "string"
                            }
                          },
                          "required": [
                            "bridge",
                            "url",
                            "docs",
                            "summary"
                          ],
                          "type": "object"
                        },
                        "maxItems": 3,
                        "type": "array"
                      }
                    },
                    "required": [
                      "docs"
                    ],
                    "type": "object"
                  },
                  "algorithm_version": {
                    "const": "x509-certificate-inspect-v1",
                    "description": "Pinned certificate inspection contract",
                    "type": "string"
                  },
                  "at_time": {
                    "description": "Applied validity comparison instant",
                    "format": "date-time",
                    "type": "string"
                  },
                  "certificate": {
                    "additionalProperties": false,
                    "description": "Normalized RFC 5280 leaf certificate fields without a trust conclusion",
                    "properties": {
                      "constraints": {
                        "additionalProperties": false,
                        "description": "Parsed basic constraints without path validation",
                        "properties": {
                          "basic_constraints_valid": {
                            "description": "Whether a basic constraints extension was parsed",
                            "type": "boolean"
                          },
                          "is_ca": {
                            "description": "Certificate CA bit; not a trust result",
                            "type": "boolean"
                          },
                          "max_path_length": {
                            "description": "Parsed path length, often -1 when absent",
                            "minimum": -1,
                            "type": "integer"
                          },
                          "max_path_length_zero": {
                            "description": "Whether an explicit zero path length was present",
                            "type": "boolean"
                          }
                        },
                        "required": [
                          "basic_constraints_valid",
                          "is_ca",
                          "max_path_length",
                          "max_path_length_zero"
                        ],
                        "type": "object"
                      },
                      "extended_key_usage": {
                        "description": "Normalized extended key usages and unknown OIDs",
                        "items": {
                          "description": "Normalized string value",
                          "type": "string"
                        },
                        "maxItems": 128,
                        "type": "array"
                      },
                      "fingerprint_sha256": {
                        "description": "Colon-separated uppercase SHA-256 fingerprint of the exact DER bytes",
                        "pattern": "^([0-9A-F]{2}:){31}[0-9A-F]{2}$",
                        "type": "string"
                      },
                      "issuer": {
                        "description": "Printable issuer distinguished name",
                        "type": "string"
                      },
                      "issuer_rdns": {
                        "description": "Ordered issuer relative distinguished names",
                        "items": {
                          "description": "One relative distinguished name set",
                          "items": {
                            "additionalProperties": false,
                            "description": "One distinguished-name attribute",
                            "properties": {
                              "name": {
                                "description": "Known stable attribute name or unknown",
                                "type": "string"
                              },
                              "oid": {
                                "description": "Dotted-decimal attribute object identifier",
                                "type": "string"
                              },
                              "value": {
                                "description": "Printable attribute value",
                                "type": "string"
                              }
                            },
                            "required": [
                              "oid",
                              "name",
                              "value"
                            ],
                            "type": "object"
                          },
                          "maxItems": 32,
                          "type": "array"
                        },
                        "maxItems": 128,
                        "type": "array"
                      },
                      "key_usage": {
                        "description": "Normalized RFC 5280 key usage names",
                        "items": {
                          "description": "Normalized string value",
                          "type": "string"
                        },
                        "maxItems": 9,
                        "type": "array"
                      },
                      "not_after": {
                        "description": "Certificate validity upper bound",
                        "format": "date-time",
                        "type": "string"
                      },
                      "not_before": {
                        "description": "Certificate validity lower bound",
                        "format": "date-time",
                        "type": "string"
                      },
                      "public_key": {
                        "additionalProperties": false,
                        "description": "Included public-key algorithm and size",
                        "properties": {
                          "algorithm": {
                            "description": "Parsed public-key algorithm",
                            "type": "string"
                          },
                          "bits": {
                            "description": "Public-key or curve bit size; zero only for an unsupported parsed type",
                            "maximum": 16384,
                            "minimum": 0,
                            "type": "integer"
                          }
                        },
                        "required": [
                          "algorithm",
                          "bits"
                        ],
                        "type": "object"
                      },
                      "sans": {
                        "additionalProperties": false,
                        "description": "Caller-provided subject alternative names; URI values were not fetched",
                        "properties": {
                          "dns_names": {
                            "description": "DNS subject alternative names",
                            "items": {
                              "description": "Normalized string value",
                              "type": "string"
                            },
                            "maxItems": 256,
                            "type": "array"
                          },
                          "email_addresses": {
                            "description": "Email subject alternative names",
                            "items": {
                              "description": "Normalized string value",
                              "type": "string"
                            },
                            "maxItems": 256,
                            "type": "array"
                          },
                          "ip_addresses": {
                            "description": "Canonical IP subject alternative names",
                            "items": {
                              "description": "Normalized string value",
                              "type": "string"
                            },
                            "maxItems": 256,
                            "type": "array"
                          },
                          "uris": {
                            "description": "URI subject alternative names; never fetched",
                            "items": {
                              "description": "Normalized string value",
                              "type": "string"
                            },
                            "maxItems": 256,
                            "type": "array"
                          }
                        },
                        "required": [
                          "dns_names",
                          "email_addresses",
                          "ip_addresses",
                          "uris"
                        ],
                        "type": "object"
                      },
                      "serial_hex": {
                        "description": "Certificate serial number in uppercase hexadecimal",
                        "type": "string"
                      },
                      "signature_algorithm": {
                        "description": "Parsed certificate signature algorithm name",
                        "type": "string"
                      },
                      "subject": {
                        "description": "Printable subject distinguished name",
                        "type": "string"
                      },
                      "subject_rdns": {
                        "description": "Ordered subject relative distinguished names",
                        "items": {
                          "description": "One relative distinguished name set",
                          "items": {
                            "additionalProperties": false,
                            "description": "One distinguished-name attribute",
                            "properties": {
                              "name": {
                                "description": "Known stable attribute name or unknown",
                                "type": "string"
                              },
                              "oid": {
                                "description": "Dotted-decimal attribute object identifier",
                                "type": "string"
                              },
                              "value": {
                                "description": "Printable attribute value",
                                "type": "string"
                              }
                            },
                            "required": [
                              "oid",
                              "name",
                              "value"
                            ],
                            "type": "object"
                          },
                          "maxItems": 32,
                          "type": "array"
                        },
                        "maxItems": 128,
                        "type": "array"
                      }
                    },
                    "required": [
                      "fingerprint_sha256",
                      "serial_hex",
                      "subject",
                      "subject_rdns",
                      "issuer",
                      "issuer_rdns",
                      "not_before",
                      "not_after",
                      "sans",
                      "key_usage",
                      "extended_key_usage",
                      "public_key",
                      "signature_algorithm",
                      "constraints"
                    ],
                    "type": "object"
                  },
                  "hostname": {
                    "description": "Compared hostname, empty when not requested",
                    "type": "string"
                  },
                  "hostname_evaluated": {
                    "description": "Whether hostname comparison was requested",
                    "type": "boolean"
                  },
                  "hostname_matches": {
                    "description": "Standard name-matcher result; not a trust decision",
                    "type": "boolean"
                  },
                  "operation": {
                    "const": "certificate-inspect",
                    "description": "Stable operation name",
                    "type": "string"
                  },
                  "time_status": {
                    "description": "Date-only status; not a trust decision",
                    "enum": [
                      "not_yet_valid",
                      "currently_valid",
                      "expired"
                    ],
                    "type": "string"
                  },
                  "warnings": {
                    "description": "Trust and parsing limitations; never certificate trust conclusions",
                    "items": {
                      "description": "Human-readable warning",
                      "type": "string"
                    },
                    "maxItems": 8,
                    "type": "array"
                  }
                },
                "required": [
                  "operation",
                  "algorithm_version",
                  "at_time",
                  "hostname_evaluated",
                  "hostname",
                  "hostname_matches",
                  "time_status",
                  "certificate",
                  "warnings"
                ],
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      },
      "tags": [
        "x509-certificate",
        "tls-certificate",
        "certificate-fingerprint",
        "hostname-match",
        "rfc5280"
      ]
    }
  },
  "tags": [
    "bazaar"
  ],
  "sourceHost": "artifact-inspector.use.x402atlas.com",
  "lastUpdated": "2026-09-15T06:32:37.399Z",
  "quality": {
    "calls30d": 2,
    "uniquePayers30d": 1,
    "lastCalledAt": "2026-09-15T06:32:37.244Z"
  },
  "liveness": {},
  "verified": false,
  "featured": false,
  "provider": {
    "host": "artifact-inspector.use.x402atlas.com",
    "manifest_name": "artifact-inspector.use.x402atlas.com",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-09-18T22:00:31.484Z"
  }
}