Website owners can use the API to monitor the SSL certificates used by their own sites, ensuring that they are valid and up-to-date. By detecting and addressing any potential issues with their SSL certificates, website owners can help to maintain the security and trust of their sites.
Third-party vendors and service providers can use the API to verify the SSL certificates used by the sites they interact with. This can help them to ensure that they are interacting with secure and trustworthy sites, and can detect potential security issues before they become problematic.
Security researchers can use the API to analyze SSL certificates and detect potential vulnerabilities and threats. By examining the information provided by the API, researchers can identify potential weaknesses in SSL implementations and can develop new security tools and techniques to address these issues.
Application developers can use the API to build security features into their applications. By verifying the SSL certificates used by the sites their applications interact with, developers can help to ensure that their applications are secure and trustworthy.
IT administrators and network managers can use the API to monitor SSL certificates used on their networks. By regularly checking SSL certificates, administrators can detect potential security issues and ensure that all SSL certificates are valid and up-to-date.
Besides API call limitations per month, there are no other limitations.
Check the validity of an SSL certificate, returns certificate information.
Get Info - Endpoint Features
| Object | Description |
|---|---|
host |
[Required] |
{"subject":{"CN":"*.google.com"},"issuer":{"C":"US","O":"Google Trust Services","CN":"WR2"},"validFrom":"2024-11-04T08:37:47.000Z","validTo":"2025-01-27T08:37:46.000Z","expiresInDays":44,"fingerprint":"08:EB:C7:D6:BA:86:9E:85:23:FF:C8:A2:9C:EE:A5:DE:3E:65:74:7A","fingerprint256":"7A:D9:82:21:48:10:C3:DB:B6:F7:E6:D5:25:95:B0:8D:A0:58:D6:22:F9:E7:7E:2A:18:72:89:1D:67:29:C8:6A","serialNumber":"C83A8AA5F211F22610C566FC810B18A4","pem":"-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----","protocol":"TLSv1.3","cipher":{"name":"TLS_AES_256_GCM_SHA384","standardName":"TLS_AES_256_GCM_SHA384","version":"TLSv1.3"},"subjectAltNames":"DNS:*.google.com, DNS:*.appengine.google.com, DNS:*.bdn.dev, DNS:*.origin-test.bdn.dev, DNS:*.cloud.google.com, DNS:*.crowdsource.google.com, DNS:*.datacompute.google.com, DNS:*.google.ca, DNS:*.google.cl, DNS:*.google.co.in, DNS:*.google.co.jp, DNS:*.google.co.uk, DNS:*.google.com.ar, DNS:*.google.com.au, DNS:*.google.com.br, DNS:*.google.com.co, DNS:*.google.com.mx, DNS:*.google.com.tr, DNS:*.google.com.vn, DNS:*.google.de, DNS:*.google.es, DNS:*.google.fr, DNS:*.google.hu, DNS:*.google.it, DNS:*.google.nl, DNS:*.google.pl, DNS:*.google.pt, DNS:*.googleapis.cn, DNS:*.googlevideo.com, DNS:*.gstatic.cn, DNS:*.gstatic-cn.com, DNS:googlecnapps.cn, DNS:*.googlecnapps.cn, DNS:googleapps-cn.com, DNS:*.googleapps-cn.com, DNS:gkecnapps.cn, DNS:*.gkecnapps.cn, DNS:googledownloads.cn, DNS:*.googledownloads.cn, DNS:recaptcha.net.cn, DNS:*.recaptcha.net.cn, DNS:recaptcha-cn.net, DNS:*.recaptcha-cn.net, DNS:widevine.cn, DNS:*.widevine.cn, DNS:ampproject.org.cn, DNS:*.ampproject.org.cn, DNS:ampproject.net.cn, DNS:*.ampproject.net.cn, DNS:google-analytics-cn.com, DNS:*.google-analytics-cn.com, DNS:googleadservices-cn.com, DNS:*.googleadservices-cn.com, DNS:googlevads-cn.com, DNS:*.googlevads-cn.com, DNS:googleapis-cn.com, DNS:*.googleapis-cn.com, DNS:googleoptimize-cn.com, DNS:*.googleoptimize-cn.com, DNS:doubleclick-cn.net, DNS:*.doubleclick-cn.net, DNS:*.fls.doubleclick-cn.net, DNS:*.g.doubleclick-cn.net, DNS:doubleclick.cn, DNS:*.doubleclick.cn, DNS:*.fls.doubleclick.cn, DNS:*.g.doubleclick.cn, DNS:dartsearch-cn.net, DNS:*.dartsearch-cn.net, DNS:googletraveladservices-cn.com, DNS:*.googletraveladservices-cn.com, DNS:googletagservices-cn.com, DNS:*.googletagservices-cn.com, DNS:googletagmanager-cn.com, DNS:*.googletagmanager-cn.com, DNS:googlesyndication-cn.com, DNS:*.googlesyndication-cn.com, DNS:*.safeframe.googlesyndication-cn.com, DNS:app-measurement-cn.com, DNS:*.app-measurement-cn.com, DNS:gvt1-cn.com, DNS:*.gvt1-cn.com, DNS:gvt2-cn.com, DNS:*.gvt2-cn.com, DNS:2mdn-cn.net, DNS:*.2mdn-cn.net, DNS:googleflights-cn.net, DNS:*.googleflights-cn.net, DNS:admob-cn.com, DNS:*.admob-cn.com, DNS:googlesandbox-cn.com, DNS:*.googlesandbox-cn.com, DNS:*.safenup.googlesandbox-cn.com, DNS:*.gstatic.com, DNS:*.metric.gstatic.com, DNS:*.gvt1.com, DNS:*.gcpcdn.gvt1.com, DNS:*.gvt2.com, DNS:*.gcp.gvt2.com, DNS:*.url.google.com, DNS:*.youtube-nocookie.com, DNS:*.ytimg.com, DNS:android.com, DNS:*.android.com, DNS:*.flash.android.com, DNS:g.cn, DNS:*.g.cn, DNS:g.co, DNS:*.g.co, DNS:goo.gl, DNS:www.goo.gl, DNS:google-analytics.com, DNS:*.google-analytics.com, DNS:google.com, DNS:googlecommerce.com, DNS:*.googlecommerce.com, DNS:ggpht.cn, DNS:*.ggpht.cn, DNS:urchin.com, DNS:*.urchin.com, DNS:youtu.be, DNS:youtube.com, DNS:*.youtube.com, DNS:music.youtube.com, DNS:*.music.youtube.com, DNS:youtubeeducation.com, DNS:*.youtubeeducation.com, DNS:youtubekids.com, DNS:*.youtubekids.com, DNS:yt.be, DNS:*.yt.be, DNS:android.clients.google.com, DNS:*.android.google.cn, DNS:*.chrome.google.cn, DNS:*.developers.google.cn","infoAccess":{"OCSP - URI":["http://o.pki.goog/wr2"],"CA Issuers - URI":["http://i.pki.goog/wr2.crt"]}}
curl --location --request GET 'https://zylalabs.com/api/4563/ssl+-+tls+certificate+verification+api/5616/get+info?host=google.com' --header 'Authorization: Bearer YOUR_API_KEY'
| Header | Description |
|---|---|
Authorization
|
[Required] Should be Bearer access_key. See "Your API Access Key" above when you are subscribed. |
No long-term commitment. Upgrade, downgrade, or cancel anytime. Free Trial includes up to 50 requests.
The SSL/TLS Certificate Verification API is a tool that allows developers to programmatically validate and authenticate SSL/TLS certificates used in secure web communications. It verifies key attributes such as certificate authenticity, expiration dates, and the certificate chain's integrity.
The API authenticates SSL/TLS certificates by checking their digital signatures against trusted Certificate Authorities (CAs) and verifying that they are not expired or revoked. It also validates the certificate chain to ensure that each certificate in the chain is valid and issued by a trusted authority.
The API supports standard SSL/TLS protocols (such as TLS 1.2 and TLS 1.3) and cryptographic standards (RSA, ECDSA) commonly used in securing web communications. It adheres to industry best practices and guidelines for certificate validation and cryptographic security.
Yes, the API can detect if a certificate has been revoked by checking Certificate Revocation Lists (CRLs) or using the Online Certificate Status Protocol (OCSP). It provides insights into the current status of certificates to ensure they are valid for use in secure connections.
The API validates the certificate chain by verifying that each certificate in the chain is signed by the issuer of the preceding certificate, up to a trusted root CA certificate. This ensures a complete chain of trust from the server certificate to a trusted root.
The Get Info endpoint returns detailed information about an SSL certificate, including its subject, issuer, validity period, fingerprint, serial number, and PEM format. This data helps users assess the certificate's authenticity and security status.
Key fields in the response include "subject" (certificate owner), "issuer" (certificate authority), "validFrom" and "validTo" (validity period), "expiresInDays" (days until expiration), and "fingerprint" (unique identifier). These fields provide essential insights into the certificate's status.
The response data is structured in JSON format, with nested objects for "subject" and "issuer." Each object contains relevant attributes, making it easy to parse and extract specific information about the SSL certificate.
The Get Info endpoint provides information on certificate authenticity, expiration dates, issuer details, and the certificate's fingerprint. This data is crucial for monitoring and managing SSL certificates effectively.
The Get Info endpoint typically accepts parameters such as the certificate's domain name or serial number. Users can customize their requests by specifying these parameters to retrieve information for specific certificates.
Users can utilize the returned data to monitor SSL certificate validity, plan renewals, and ensure secure connections. For example, by checking "expiresInDays," users can proactively manage certificate lifecycles and avoid service interruptions.
The data is sourced from trusted Certificate Authorities (CAs) and public certificate repositories. This ensures that the information regarding SSL certificates is accurate and reliable for validation purposes.
Data accuracy is maintained through regular updates from Certificate Authorities and adherence to industry standards for certificate validation. The API checks against trusted sources to ensure the information reflects the current status of the certificates.
To obtain your API key, you first need to sign in to your account and subscribe to the API you want to use. Once subscribed, go to your Profile, open the Subscription section, and select the specific API. Your API key will be available there and can be used to authenticate your requests.
You can’t switch APIs during the free trial. If you subscribe to a different API, your trial will end and the new subscription will start as a paid plan.
If you don’t cancel before the 7th day, your free trial will end automatically and your subscription will switch to a paid plan under the same plan you originally subscribed to, meaning you will be charged and gain access to the API calls included in that plan.
The free trial ends when you reach 50 API requests or after 7 days, whichever comes first.
No, the free trial is available only once, so we recommend using it on the API that interests you the most. Most of our APIs offer a free trial, but some may not include this option.
Yes, we offer a 7-day free trial that allows you to make up to 50 API calls at no cost, so you can test our APIs without any commitment.
Zyla API Hub is like a big store for APIs, where you can find thousands of them all in one place. We also offer dedicated support and real-time monitoring of all APIs. Once you sign up, you can pick and choose which APIs you want to use. Just remember, each API needs its own subscription. But if you subscribe to multiple ones, you'll use the same key for all of them, making things easier for you.
Please have a look at our Refund Policy: https://zylalabs.com/terms#refund
Service Level:
100%
Response Time:
559ms
Service Level:
100%
Response Time:
841ms
Service Level:
100%
Response Time:
505ms
Service Level:
100%
Response Time:
800ms
Service Level:
100%
Response Time:
487ms
Service Level:
100%
Response Time:
832ms
Service Level:
100%
Response Time:
921ms
Service Level:
100%
Response Time:
898ms
Service Level:
100%
Response Time:
1,045ms
Service Level:
100%
Response Time:
609ms
Service Level:
100%
Response Time:
1,254ms
Service Level:
100%
Response Time:
0ms
Service Level:
100%
Response Time:
2,283ms
Service Level:
100%
Response Time:
628ms
Service Level:
100%
Response Time:
10,203ms
Service Level:
100%
Response Time:
1,197ms
Service Level:
100%
Response Time:
1,120ms
Service Level:
100%
Response Time:
17,609ms
Service Level:
100%
Response Time:
449ms
Service Level:
100%
Response Time:
28ms
