SSL Lookup API - Check and Monitor SSL Certificate Chains
The SSL lookup API allows you to quickly verify SSL certificate chains, check expiration dates, and access detailed issuer information. With this API, you can ensure your SSL certificates are always valid, secure, and fully compliant. Easily perform a domain certificate lookup to retrieve comprehensive details about SSL certificates, including their validity, issuer information, and encryption methods. Keep your certificates up-to-date and properly configured to avoid security risks and downtime.
By utilizing our SSL certificate lookup feature, you can efficiently check the expiration dates of SSL certificates across multiple domains. This is especially valuable for IT administrators and web developers who need to maintain certificate compliance and avoid potential security risks associated with expired or misconfigured certificates. The API also supports retrieving the complete SSL certificate chain, from the domain certificate to the root Certificate Authority (CA), providing a clear view of the entire certification path.
Features
SSL Certificate Chain Lookup
Retrieve the complete chain of SSL certificates, from the domain certificate to the root Certificate Authority (CA). This feature helps verify the integrity and trustworthiness of the entire certification path, ensuring a secure certification chain.
Detailed SSL Certificate Lookup
Access comprehensive details about SSL certificates, including expiry date, issuer information, and encryption methods. This feature is essential for confirming that your certificates are correctly configured and up-to-date.
Well-Structured & Raw SSL Data
Access both well-structured and raw SSL certificate data through our API. The well-structured data provides organized and detailed information about SSL certificates, ideal for integration and analysis. For advanced use cases such as machine learning models or custom processing, you can retrieve the raw, unprocessed SSL data. This flexibility allows you to leverage the data for a wide range of applications.
API Endpoint
Access SSL Certificate Details without Chain
To retrieve comprehensive SSL certificate information without including the chain, use the following endpoint:
Retrieve SSL Certificate Chain
Obtain the complete SSL certificate chain from the root Certificate Authority (CA) to the end-user certificate with the following endpoint:
All Endpoints
| Endpoint | Description | Credits | Reference | Playground |
|---|---|---|---|---|
| SSL Certificate Lookup | Retrieve issuer, validity, and metadata for a domain's SSL certificate. | 16 | Reference | Playground |
| SSL Certificate Chain Lookup | Retrieve the full certificate chain, including intermediate and root certificates. | 8 | Reference | Playground |
How to Guides
Domain-Specific Check
To perform domain-specific checks and obtain detailed SSL certificate information, including expiration dates, include the domainName request parameter in your API request. Specify the hostname for which you require the SSL certificate details. After sending the request, review the response to access comprehensive information about the SSL certificate, such as expiry dates and other crucial data. This approach enables efficient management and monitoring of SSL certificates for individual domains.
# Check SSL Certificate for a host-name
curl -X 'GET' 'https://api.apifreaks.com/v1.0/domain/ssl/live?domainName=google.com&apiKey=API-KEY'
# Response
{
"domainName": "google.com",
"queryTime": "2024-08-20 08:37:01",
"sslCertificates": [
{
"chainOrder": "end-user",
"authenticationType": "domain",
"validityStartDate": "2024-07-30 12:32:53 UTC",
"validityEndDate": "2024-10-22 12:32:52 UTC",
"serialNumber": "71:8d:f8:a4:d1:48:8a:78:09:cc:ed:27:10:7d:81:84",
"signatureAlgorithm": "SHA256-RSA",
"subject": {
"commonName": "*.google.com"
},
"issuer": {
"commonName": "WR2",
"organization": "Google Trust Services",
"country": "US"
},
"publicKey": {
"keySize": "256 bit",
"keyAlgorithm": "ECDSA",
"pemRaw": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5pmvk0aXn2OXWW5QrASzaMP+E+cwyEFf2INKxtGITffWsIyD2qFFdLbALW6Xz1tDkK+0OELhrCFHyF+RCl3zsQ==\n-----END PUBLIC KEY-----\n"
},
"extensions": {
"authorityKeyIdentifier": "DE:1B:1E:ED:79:15:D4:3E:37:24:C3:21:BB:EC:34:39:6D:42:B2:30",
"subjectKeyIdentifier": "B6:08:C9:95:06:20:D1:F4:31:6A:19:57:B7:CD:94:87:5B:7A:CA:83",
"keyUsages": [
"Digital Signature"
],
"extendedKeyUsages": [
"TLS Web Server Authentication"
],
"crlDistributionPoints": [
"http://c.pki.goog/wr2/oBFYYahzgVI.crl"
],
"authorityInfoAccess": {
"issuers": [
"http://i.pki.goog/wr2.crt"
],
"ocsp": [
"http://o.pki.goog/wr2"
]
},
"subjectAlternativeNames": {
"dnsNames": [
"android.clients.google.com",
"*.google.de",
"*.crowdsource.google.com",
"googlesyndication-cn.com",
"*.yt.be",
"*.datacompute.google.com",
"*.gkecnapps.cn",
"*.googlesyndication-cn.com",
"*.googlevideo.com",
"admob-cn.com",
"*.gstatic.cn",
"recaptcha-cn.net",
"*.safenup.googlesandbox-cn.com",
"*.gvt2.com",
"*.googletagmanager-cn.com",
"google.com",
"*.googletraveladservices-cn.com",
"*.google.es",
"googletraveladservices-cn.com",
"yt.be",
"*.google.com.co",
"*.doubleclick.cn",
"*.google-analytics.com",
"doubleclick-cn.net",
"*.gstatic.com",
"*.2mdn-cn.net",
"*.gcpcdn.gvt1.com",
"*.google.com",
"googlesandbox-cn.com",
"*.google.com.tr",
"*.doubleclick-cn.net",
"*.googledownloads.cn",
"*.google.fr",
"gkecnapps.cn",
"*.appengine.google.com",
"*.google.co.uk",
"googledownloads.cn",
"*.youtubekids.com",
"android.com",
"*.googleflights-cn.net",
"*.bdn.dev",
"doubleclick.cn",
"*.google.nl",
"*.recaptcha-cn.net",
"*.ampproject.org.cn",
"googlevads-cn.com",
"googletagmanager-cn.com",
"*.fls.doubleclick.cn",
"*.google.com.mx",
"*.google-analytics-cn.com",
"googleadservices-cn.com",
"*.gstatic-cn.com",
"googletagservices-cn.com",
"*.googlecommerce.com",
"youtube.com",
"*.googleapps-cn.com",
"googleoptimize-cn.com",
"*.origin-test.bdn.dev",
"widevine.cn",
"*.google.com.vn",
"ampproject.net.cn",
"*.android.google.cn",
"gvt1-cn.com",
"g.co",
"g.cn",
"*.fls.doubleclick-cn.net",
"*.app-measurement-cn.com",
"*.google.hu",
"*.safeframe.googlesyndication-cn.com",
"*.android.com",
"*.googlecnapps.cn",
"*.gvt1.com",
"*.music.youtube.com",
"*.urchin.com",
"*.cloud.google.com",
"urchin.com",
"*.google.pt",
"youtu.be",
"*.google.pl",
"*.chrome.google.cn",
"*.googleapis.cn",
"*.googleapis-cn.com",
"*.gcp.gvt2.com",
"*.recaptcha.net.cn",
"music.youtube.com",
"googlecnapps.cn",
"googleapps-cn.com",
"*.google.it",
"ampproject.org.cn",
"*.metric.gstatic.com",
"app-measurement-cn.com",
"*.youtubeeducation.com",
"ggpht.cn",
"*.youtube.com",
"*.dartsearch-cn.net",
"gvt2-cn.com",
"googleapis-cn.com",
"*.google.co.jp",
"goo.gl",
"*.googlevads-cn.com",
"*.googleoptimize-cn.com",
"*.youtube-nocookie.com",
"*.gvt2-cn.com",
"*.g.doubleclick.cn",
"*.gvt1-cn.com",
"*.widevine.cn",
"*.developers.google.cn",
"*.google.com.br",
"google-analytics-cn.com",
"*.admob-cn.com",
"2mdn-cn.net",
"youtubeeducation.com",
"*.google.co.in",
"*.ampproject.net.cn",
"*.g.doubleclick-cn.net",
"*.flash.android.com",
"youtubekids.com",
"googleflights-cn.net",
"*.ytimg.com",
"*.google.cl",
"dartsearch-cn.net",
"*.ggpht.cn",
"*.googleadservices-cn.com",
"recaptcha.net.cn",
"*.url.google.com",
"*.googletagservices-cn.com",
"*.google.com.ar",
"google-analytics.com",
"*.google.com.au",
"*.googlesandbox-cn.com",
"www.goo.gl",
"*.g.co",
"*.google.ca",
"*.g.cn",
"googlecommerce.com"
]
},
"certificatePolicies": [
{
"policyId": "2.23.140.1.2.1"
}
]
},
"pemRaw": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----\n"
}
]
}
SSL Certificate Chain Lookup
Include the domainName request parameter to perform a comprehensive SSL certificate chain lookup from the root Certificate Authority (CA) to the end-user certificate. Use the SSL Certificate Chain Lookup API to retrieve the complete certification path, ensuring you get detailed information about each certificate in the chain. This approach allows for thorough verification of SSL certificates, providing valuable insights into the entire certification hierarchy for enhanced security management.
# Get all the certificates in the chain from the root to the end-user
curl -X 'GET' 'https://api.apifreaks.com/v1.0/domain/ssl/live/chain?domainName=chatgpt.com&apiKey=API-KEY'
# Response
{
"domainName": "chatgpt.com",
"queryTime": "2026-07-02 08:29:02",
"sslCertificates": [
{
"chainOrder": "end-user",
"authenticationType": "domain",
"validityStartDate": "2026-05-8 23:52:00 UTC",
"validityEndDate": "2026-08-7 00:51:52 UTC",
"serialNumber": "af:f3:6a:db:23:3c:a4:24:0e:44:77:83:1a:c1:41:ff",
"signatureAlgorithm": "ECDSA-SHA256",
"subject": {
"commonName": "chatgpt.com"
},
"issuer": {
"commonName": "WE1",
"organization": "Google Trust Services",
"country": "US"
},
"publicKey": {
"keySize": "256 bit",
"keyAlgorithm": "ECDSA",
"pemRaw": "-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECPgbfvExt94B8MHCYyV64wukIW4jNemaMd7BpCSZ8Svd6jJmaJ2CRpJh/0qtBPtJOB6gm0Qx0gtOl15P2Nxgyw==
-----END PUBLIC KEY-----
"
},
"extensions": {
"authorityKeyIdentifier": "90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38",
"subjectKeyIdentifier": "0B:11:C1:75:34:C1:B2:BE:E2:EE:51:CC:DA:49:A0:B9:B3:4D:74:DE",
"keyUsages": [
"Digital Signature"
],
"extendedKeyUsages": [
"TLS Web Server Authentication"
],
"crlDistributionPoints": [
"http://c.pki.goog/we1/e19tNpFF5H4.crl"
],
"authorityInfoAccess": {
"issuers": [
"http://i.pki.goog/we1.crt"
],
"ocsp": [
"http://o.pki.goog/s/we1/r_M"
]
},
"subjectAlternativeNames": {
"dnsNames": [
"chatgpt.com"
]
},
"certificatePolicies": [
{
"policyId": "2.23.140.1.2.1"
}
]
},
"pemRaw": "-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----
"
},
{
"chainOrder": "intermediate",
"authenticationType": "organization",
"validityStartDate": "2023-12-13 09:00:00 UTC",
"validityEndDate": "2029-02-20 14:00:00 UTC",
"serialNumber": "7f:f3:19:77:97:2c:22:4a:76:15:5d:13:b6:d6:85:e3",
"signatureAlgorithm": "ECDSA-SHA2384",
"subject": {
"commonName": "WE1",
"organization": "Google Trust Services",
"country": "US"
},
"issuer": {
"commonName": "GTS Root R4",
"organization": "Google Trust Services LLC",
"country": "US"
},
"publicKey": {
"keySize": "256 bit",
"keyAlgorithm": "ECDSA",
"pemRaw": "-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEb806/mdXR0whA4VAwkddu1hHD0DBXBeFxhk359V87YZLm4HZ1xoTpQoD+JjExuie/xBZjywmmPXmJiW7DwL6Vg==
-----END PUBLIC KEY-----
"
},
"extensions": {
"authorityKeyIdentifier": "80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C",
"subjectKeyIdentifier": "90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38",
"keyUsages": [
"CRL Sign",
"Digital Signature",
"Certificate Sign"
],
"extendedKeyUsages": [
"TLS Web Server Authentication",
"TLS Web Client Authentication"
],
"crlDistributionPoints": [
"http://c.pki.goog/r/r4.crl"
],
"authorityInfoAccess": {
"issuers": [
"http://i.pki.goog/r4.crt"
]
},
"certificatePolicies": [
{
"policyId": "2.23.140.1.2.1"
}
]
},
"pemRaw": "-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----
"
},
{
"chainOrder": "intermediate",
"authenticationType": "organization",
"validityStartDate": "2023-11-15 03:43:21 UTC",
"validityEndDate": "2028-01-28 00:00:42 UTC",
"serialNumber": "7f:e5:30:bf:33:13:43:be:dd:82:16:10:49:3d:8a:1b",
"signatureAlgorithm": "SHA256-RSA",
"subject": {
"commonName": "GTS Root R4",
"organization": "Google Trust Services LLC",
"country": "US"
},
"issuer": {
"commonName": "GlobalSign Root CA",
"organization": "GlobalSign nv-sa",
"organizationalUnit": "Root CA",
"country": "BE"
},
"publicKey": {
"keySize": "384 bit",
"keyAlgorithm": "ECDSA",
"pemRaw": "-----BEGIN PUBLIC KEY-----
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8FhzubeRr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019eWIZlD6GEZQbR3IvJx3PIjGov5cSr0R2K
-----END PUBLIC KEY-----
"
},
"extensions": {
"authorityKeyIdentifier": "60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B",
"subjectKeyIdentifier": "80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C",
"keyUsages": [
"CRL Sign",
"Digital Signature",
"Certificate Sign"
],
"extendedKeyUsages": [
"TLS Web Server Authentication",
"TLS Web Client Authentication"
],
"crlDistributionPoints": [
"http://c.pki.goog/r/gsr1.crl"
],
"authorityInfoAccess": {
"issuers": [
"http://i.pki.goog/gsr1.crt"
]
},
"certificatePolicies": [
{
"policyId": "2.23.140.1.2.1"
}
]
},
"pemRaw": "-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----
"
},
{
"chainOrder": "root",
"authenticationType": "self-signed-ca",
"validityStartDate": "2011-09-22 11:22:02 UTC",
"validityEndDate": "2030-09-22 11:22:02 UTC",
"serialNumber": "Signature Algorithm: sha256WithRSAEncryption",
"signatureAlgorithm": "SHA256-RSA",
"subject": {
"commonName": "Actalis Authentication Root CA",
"organization": "Actalis S.p.A./03358520967",
"locality": "Milan",
"country": "IT"
},
"issuer": {
"commonName": "Actalis Authentication Root CA",
"organization": "Actalis S.p.A./03358520967",
"locality": "Milan",
"country": "IT"
},
"publicKey": {
"keySize": "4096 bit",
"keyAlgorithm": "RSA",
"pemRaw": "-----BEGIN PUBLIC KEY-----
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
-----END PUBLIC KEY-----
"
},
"extensions": {
"authorityKeyIdentifier": "52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0",
"subjectKeyIdentifier": "52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0",
"keyUsages": [
"CRL Sign",
"Certificate Sign"
]
},
"pemRaw": "-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----
"
}
]
}
Access Both Raw and Structured SSL Data
To access raw SSL data in addition to structured information, set the sslRaw request parameter to true. This option is available for both API endpoints-whether you are retrieving SSL certificate details with or without the chain. When enabled with the chain endpoint, the API will provide raw SSL data for the entire certificate chain, from the root Certificate Authority (CA) to the end-user certificate. This feature allows for comprehensive analysis, providing both structured and raw data to meet various needs, including advanced processing and detailed security assessments.
# Get SSL Raw data along with structured SSL data for each SSL certificate in the chain
curl -X 'GET' 'https://api.apifreaks.com/v1.0/domain/ssl/live/chain?sslRaw=true&domainName=chatgpt.com&apiKey=API-KEY'
# Response
{
"domainName": "chatgpt.com",
"queryTime": "2026-07-02 08:30:10",
"sslCertificates": [
{
"chainOrder": "end-user",
"authenticationType": "domain",
"validityStartDate": "2026-05-8 23:52:00 UTC",
"validityEndDate": "2026-08-7 00:51:52 UTC",
"serialNumber": "af:f3:6a:db:23:3c:a4:24:0e:44:77:83:1a:c1:41:ff",
"signatureAlgorithm": "ECDSA-SHA256",
"subject": {
"commonName": "chatgpt.com"
},
"issuer": {
"commonName": "WE1",
"organization": "Google Trust Services",
"country": "US"
},
"publicKey": {
"keySize": "256 bit",
"keyAlgorithm": "ECDSA",
"pemRaw": "-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECPgbfvExt94B8MHCYyV64wukIW4jNemaMd7BpCSZ8Svd6jJmaJ2CRpJh/0qtBPtJOB6gm0Qx0gtOl15P2Nxgyw==
-----END PUBLIC KEY-----
"
},
"extensions": {
"authorityKeyIdentifier": "90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38",
"subjectKeyIdentifier": "0B:11:C1:75:34:C1:B2:BE:E2:EE:51:CC:DA:49:A0:B9:B3:4D:74:DE",
"keyUsages": [
"Digital Signature"
],
"extendedKeyUsages": [
"TLS Web Server Authentication"
],
"crlDistributionPoints": [
"http://c.pki.goog/we1/e19tNpFF5H4.crl"
],
"authorityInfoAccess": {
"issuers": [
"http://i.pki.goog/we1.crt"
],
"ocsp": [
"http://o.pki.goog/s/we1/r_M"
]
},
"subjectAlternativeNames": {
"dnsNames": [
"chatgpt.com"
]
},
"certificatePolicies": [
{
"policyId": "2.23.140.1.2.1"
}
]
},
"pemRaw": "-----BEGIN CERTIFICATE-----
MIIDljCCAzugAwIBAgIRAK/zatsjPKQkDkR3gxrBQf8wCgYIKoZIzj0EAwIwOzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoGA1UEAxMDV0UxMB4XDTI2MDUwODIzNTIwMFoXDTI2MDgwNzAwNTE1MlowFjEUMBIGA1UEAxMLY2hhdGdwdC5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQI+Bt+8TG33gHwwcJjJXrjC6QhbiM16Zox3sGkJJnxK93qMmZonYJGkmH/Sq0E+0k4HqCbRDHSC06XXk/Y3GDLo4ICQzCCAj8wDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAsRwXU0wbK+4u5RzNpJoLmzTXTeMB8GA1UdIwQYMBaAFJB3kjVnxP+ozKnme9mAeXvMk/k4MF4GCCsGAQUFBwEBBFIwUDAnBggrBgEFBQcwAYYbaHR0cDovL28ucGtpLmdvb2cvcy93ZTEvcl9NMCUGCCsGAQUFBzAChhlodHRwOi8vaS5wa2kuZ29vZy93ZTEuY3J0MBYGA1UdEQQPMA2CC2NoYXRncHQuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jLnBraS5nb29nL3dlMS9lMTl0TnBGRjVINC5jcmwwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ4KOEdzAAAEAwBGMEQCICmygR5zg6SIps54pyZCVEmUkB9Z6bWZyl7LcmkFH3ehAiBU8gOeS5Oqc8QoUMhvqxOp29mR2hOn+AxBZffDXkDEkQB2AMijxH/Hs625NWsBP2p6Em3jOk5DpcZG+ZetOXWZHc+aAAABngo4R4sAAAQDAEcwRQIgEiX6YAepJ13dNcoLLBBQ9QLF81djwDA0khKaOZZQcToCIQDlWokzregyHm5wevAgmRo5nYLGoz/DK0bupJeur+Mk3zAKBggqhkjOPQQDAgNJADBGAiEAwPjnG8x8sv9U2PMzTGUb9iRMDYBqdKeYMLiP0PquLqwCIQDh3grrS2HJ0NFTkd8SoggbfKYXqdOlbT5lWQHKYV34EQ==
-----END CERTIFICATE-----
"
},
{
"chainOrder": "intermediate",
"authenticationType": "organization",
"validityStartDate": "2023-12-13 09:00:00 UTC",
"validityEndDate": "2029-02-20 14:00:00 UTC",
"serialNumber": "7f:f3:19:77:97:2c:22:4a:76:15:5d:13:b6:d6:85:e3",
"signatureAlgorithm": "ECDSA-SHA2384",
"subject": {
"commonName": "WE1",
"organization": "Google Trust Services",
"country": "US"
},
"issuer": {
"commonName": "GTS Root R4",
"organization": "Google Trust Services LLC",
"country": "US"
},
"publicKey": {
"keySize": "256 bit",
"keyAlgorithm": "ECDSA",
"pemRaw": "-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEb806/mdXR0whA4VAwkddu1hHD0DBXBeFxhk359V87YZLm4HZ1xoTpQoD+JjExuie/xBZjywmmPXmJiW7DwL6Vg==
-----END PUBLIC KEY-----
"
},
"extensions": {
"authorityKeyIdentifier": "80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C",
"subjectKeyIdentifier": "90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38",
"keyUsages": [
"CRL Sign",
"Digital Signature",
"Certificate Sign"
],
"extendedKeyUsages": [
"TLS Web Server Authentication",
"TLS Web Client Authentication"
],
"crlDistributionPoints": [
"http://c.pki.goog/r/r4.crl"
],
"authorityInfoAccess": {
"issuers": [
"http://i.pki.goog/r4.crt"
]
},
"certificatePolicies": [
{
"policyId": "2.23.140.1.2.1"
}
]
},
"pemRaw": "-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----
"
},
{
"chainOrder": "intermediate",
"authenticationType": "organization",
"validityStartDate": "2023-11-15 03:43:21 UTC",
"validityEndDate": "2028-01-28 00:00:42 UTC",
"serialNumber": "7f:e5:30:bf:33:13:43:be:dd:82:16:10:49:3d:8a:1b",
"signatureAlgorithm": "SHA256-RSA",
"subject": {
"commonName": "GTS Root R4",
"organization": "Google Trust Services LLC",
"country": "US"
},
"issuer": {
"commonName": "GlobalSign Root CA",
"organization": "GlobalSign nv-sa",
"organizationalUnit": "Root CA",
"country": "BE"
},
"publicKey": {
"keySize": "384 bit",
"keyAlgorithm": "ECDSA",
"pemRaw": "-----BEGIN PUBLIC KEY-----
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8FhzubeRr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019eWIZlD6GEZQbR3IvJx3PIjGov5cSr0R2K
-----END PUBLIC KEY-----
"
},
"extensions": {
"authorityKeyIdentifier": "60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B",
"subjectKeyIdentifier": "80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C",
"keyUsages": [
"CRL Sign",
"Digital Signature",
"Certificate Sign"
],
"extendedKeyUsages": [
"TLS Web Server Authentication",
"TLS Web Client Authentication"
],
"crlDistributionPoints": [
"http://c.pki.goog/r/gsr1.crl"
],
"authorityInfoAccess": {
"issuers": [
"http://i.pki.goog/gsr1.crt"
]
},
"certificatePolicies": [
{
"policyId": "2.23.140.1.2.1"
}
]
},
"pemRaw": "-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----
"
},
{
"chainOrder": "root",
"authenticationType": "self-signed-ca",
"validityStartDate": "2011-09-22 11:22:02 UTC",
"validityEndDate": "2030-09-22 11:22:02 UTC",
"serialNumber": "Signature Algorithm: sha256WithRSAEncryption",
"signatureAlgorithm": "SHA256-RSA",
"subject": {
"commonName": "Actalis Authentication Root CA",
"organization": "Actalis S.p.A./03358520967",
"locality": "Milan",
"country": "IT"
},
"issuer": {
"commonName": "Actalis Authentication Root CA",
"organization": "Actalis S.p.A./03358520967",
"locality": "Milan",
"country": "IT"
},
"publicKey": {
"keySize": "4096 bit",
"keyAlgorithm": "RSA",
"pemRaw": "-----BEGIN PUBLIC KEY-----
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
-----END PUBLIC KEY-----
"
},
"extensions": {
"authorityKeyIdentifier": "52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0",
"subjectKeyIdentifier": "52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0",
"keyUsages": [
"CRL Sign",
"Certificate Sign"
]
},
"pemRaw": "-----BEGIN CERTIFICATE-----
MIIFuzCCA6OgAwIBAgIIVwoRl0LE48wwDQYJKoZIhvcNAQELBQAwazELMAkGA1UEBhMCSVQxDjAMBgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzEnMCUGA1UEAwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290IENBMB4XDTExMDkyMjExMjIwMloXDTMwMDkyMjExMjIwMlowazELMAkGA1UEBhMCSVQxDjAMBgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzEnMCUGA1UEAwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp8bEpSmkLO/lGMWwUKNvUTufClrJwkg4CsIcoBh/kbWHuUA/3R1oHwiD1S0eiKD4j1aPbZkCkpAW1V8IbInX4ay8IMKx4INRimlNAJZaby/ARH6jDuSRzVju3PvHHkVH3Se5CAGfpiEd9UEtL0z9KK3giq0itFZljoZUj5NDKd45RnijMCO6zfB9E1fAXdKDa0hMxKufgFpbOr3JpyI/gCczWw63igxdBzcIy2zSekciRDXFzMwujt0q7bd9Zg1fYVEiVRvjRuPjPdA1YprbrxTIW6HMiRvhMCb8oJsfgadHHwTrozmSBp+Z07/T6k9QnBn+locePGX2oxgkg4YQ51Q+qDp2JE+BIcXjDwL4k5RHILv+1A7TaLndxHqEguNTVHnd25zS8gebLra8Pu2Fbe8lEfKXGkJh90qX6IuxEAf6ZYGyojnP9zz/GPvG8VqLWeICrHuS0E4UT1lF9gxeKF+w6D9Fz8+vm2/7hNN3WpVvrJSEnu68wEqPSpP4RCHiMUVhUE4Q2OM1fEwZtN4Fv6MGn8i1zeQf1xcGDXqVdFUNaBr8EBtiZJ1t4JWgw5QHVw0U5r0F+7if5t+L4sbnfpb2U8WANFAoWPASUHEXMLrmeGO89LKtmyuy/uE5jF66CyCU3nuDuP/jVo23Eek7jPKxwV2dpAtMK9myGPW1n0sCAwEAAaNjMGEwHQYDVR0OBBYEFFLYiDrIn3hm7YnzezhwlMkCAjbQMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUUtiIOsifeGbtifN7OHCUyQICNtAwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4ICAQALe3KHwGCmSUyIWOYdiPcUZEim2FgKDk8TNd81HdTtBjHIgT5q1d07GjLukD0R0i70jsNjLiNmsGe+b7bAEzlgqqI0JZN1Ut6nna0Oh4lScWoWPBkdg/iaKWW+9D+a2fDzWochcYBNy+A4mz+7+uAwTc+G02UQGRjRlwKxK3JCaKygvU5a2hi/a5iB0P2avl4VSM0RFbnAKVy06Ij3Pjaut2L9HmLecHgQHEhb2rykOLpn7VU+Xlff1ANATIGk0k9jpwlCCRT8AKnCgHNPLsBA2RF7SOp6AsDT6ygBJlh0wcBzIm2Tlf05fbsq4/aC4yyXX04fkZT6/iyj2HYauE2yOE+b+h1IYHkm4vP9qdCa6HCPSXrW5b0KDtst842/6+OkfcvHlXHo2qN8xcL4dJIEG4aspCJTQLas/kx2z/uUMsA1n3Y/buWQbqCmJqK4LL7RK4X9p2jIugErsWx0Hbhzlefut8cl8ABMALJ+tguLHPPAUJ4lueAI3jZm/zel0btUZCzJJ7VLkn5l/9Mt4blOvH+kQSGQQXemOR/qnuOf0GZvBeyqdn6/axag67XH/JJULysRJyU3eExRarDzzFhdFPFqSBX/wge2sY0PjlxQRrM9vwGYT7JZVEc+NHt4bVaTLnPqZih4zR0Uv6CPLy64Lo7yFIrM6bV8+2ydDKXhlg==
-----END CERTIFICATE-----
"
}
],
"sslRaw": "
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
af:f3:6a:db:23:3c:a4:24:0e:44:77:83:1a:c1:41:ff
Signature Algorithm: ecdsa-with-SHA256
Issuer: C = US, O = Google Trust Services, CN = WE1
Validity
Not Before: May 8 23:52:00 2026 GMT
Not After : Aug 7 00:51:52 2026 GMT
Subject: CN = chatgpt.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:08:f8:1b:7e:f1:31:b7:de:01:f0:c1:c2:63:25:
7a:e3:0b:a4:21:6e:23:35:e9:9a:31:de:c1:a4:24:
99:f1:2b:dd:ea:32:66:68:9d:82:46:92:61:ff:4a:
ad:04:fb:49:38:1e:a0:9b:44:31:d2:0b:4e:97:5e:
4f:d8:dc:60:cb
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
0B:11:C1:75:34:C1:B2:BE:E2:EE:51:CC:DA:49:A0:B9:B3:4D:74:DE
X509v3 Authority Key Identifier:
90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38
Authority Information Access:
OCSP - URI:http://o.pki.goog/s/we1/r_M
CA Issuers - URI:http://i.pki.goog/we1.crt
X509v3 Subject Alternative Name:
DNS:chatgpt.com
Policy: 2.23.140.1.2.1
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://c.pki.goog/we1/e19tNpFF5H4.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
Timestamp : May 9 00:52:01.011 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:29:B2:81:1E:73:83:A4:88:A6:CE:78:A7:
26:42:54:49:94:90:1F:59:E9:B5:99:CA:5E:CB:72:69:
05:1F:77:A1:02:20:54:F2:03:9E:4B:93:AA:73:C4:28:
50:C8:6F:AB:13:A9:DB:D9:91:DA:13:A7:F8:0C:41:65:
F7:C3:5E:40:C4:91
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:
E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A
Timestamp : May 9 00:52:01.035 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:12:25:FA:60:07:A9:27:5D:DD:35:CA:0B:
2C:10:50:F5:02:C5:F3:57:63:C0:30:34:92:12:9A:39:
96:50:71:3A:02:21:00:E5:5A:89:33:AD:E8:32:1E:6E:
70:7A:F0:20:99:1A:39:9D:82:C6:A3:3F:C3:2B:46:EE:
A4:97:AE:AF:E3:24:DF
Signature Algorithm: ecdsa-with-SHA256
Signature Value:
30:46:02:21:00:c0:f8:e7:1b:cc:7c:b2:ff:54:d8:f3:33:4c:
65:1b:f6:24:4c:0d:80:6a:74:a7:98:30:b8:8f:d0:fa:ae:2e:
ac:02:21:00:e1:de:0a:eb:4b:61:c9:d0:d1:53:91:df:12:a2:
08:1b:7c:a6:17:a9:d3:a5:6d:3e:65:59:01:ca:61:5d:f8:11
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECPgbfvExt94B8MHCYyV64wukIW4j
NemaMd7BpCSZ8Svd6jJmaJ2CRpJh/0qtBPtJOB6gm0Qx0gtOl15P2Nxgyw==
-----END PUBLIC KEY-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f3:19:77:97:2c:22:4a:76:15:5d:13:b6:d6:85:e3
Signature Algorithm: ecdsa-with-SHA384
Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R4
Validity
Not Before: Dec 13 09:00:00 2023 GMT
Not After : Feb 20 14:00:00 2029 GMT
Subject: C = US, O = Google Trust Services, CN = WE1
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:6f:cd:3a:fe:67:57:47:4c:21:03:85:40:c2:47:
5d:bb:58:47:0f:40:c1:5c:17:85:c6:19:37:e7:d5:
7c:ed:86:4b:9b:81:d9:d7:1a:13:a5:0a:03:f8:98:
c4:c6:e8:9e:ff:10:59:8f:2c:26:98:f5:e6:26:25:
bb:0f:02:fa:56
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Certificate Sign, CRL Sign
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 Subject Key Identifier:
90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38
X509v3 Authority Key Identifier:
80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C
Authority Information Access:
CA Issuers - URI:http://i.pki.goog/r4.crt
X509v3 CRL Distribution Points:
Full Name:
URI:http://c.pki.goog/r/r4.crl
Policy: 2.23.140.1.2.1
Policy: 2.23.140.1.2.1
Signature Algorithm: ecdsa-with-SHA384
Signature Value:
30:65:02:31:00:e7:02:ab:51:d6:f7:43:95:ce:75:fe:d1:11:
94:d5:cc:40:41:7a:26:be:d8:0c:f3:32:2d:3d:90:ae:15:0f:
23:48:12:52:8f:3e:64:79:13:af:f5:a6:2c:02:6e:55:b1:02:
30:26:89:cc:68:01:62:e7:89:ab:7e:17:e8:14:d6:44:7e:e3:
4c:49:0e:bf:6c:80:62:34:b8:b2:a1:7e:3a:16:88:50:bc:a7:
88:a0:9f:7d:73:1e:ec:52:41:4d:ee:e2:56
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEb806/mdXR0whA4VAwkddu1hHD0DB
XBeFxhk359V87YZLm4HZ1xoTpQoD+JjExuie/xBZjywmmPXmJiW7DwL6Vg==
-----END PUBLIC KEY-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e5:30:bf:33:13:43:be:dd:82:16:10:49:3d:8a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
Validity
Not Before: Nov 15 03:43:21 2023 GMT
Not After : Jan 28 00:00:42 2028 GMT
Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R4
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (384 bit)
pub:
04:f3:74:73:a7:68:8b:60:ae:43:b8:35:c5:81:30:
7b:4b:49:9d:fb:c1:61:ce:e6:de:46:bd:6b:d5:61:
18:35:ae:40:dd:73:f7:89:91:30:5a:eb:3c:ee:85:
7c:a2:40:76:3b:a9:c6:b8:47:d8:2a:e7:92:91:6a:
73:e9:b1:72:39:9f:29:9f:a2:98:d3:5f:5e:58:86:
65:0f:a1:84:65:06:d1:dc:8b:c9:c7:73:c8:8c:6a:
2f:e5:c4:ab:d1:1d:8a
ASN1 OID: secp384r1
NIST CURVE: P-384
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Certificate Sign, CRL Sign
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C
X509v3 Authority Key Identifier:
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
Authority Information Access:
CA Issuers - URI:http://i.pki.goog/gsr1.crt
X509v3 CRL Distribution Points:
Full Name:
URI:http://c.pki.goog/r/gsr1.crl
Policy: 2.23.140.1.2.1
Policy: 2.23.140.1.2.1
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
18:42:bb:0f:06:d6:03:87:96:e3:3f:63:81:0f:09:a4:a1:68:
48:0c:39:22:73:9e:f8:cb:4e:2d:7f:31:e9:9f:e7:09:a1:d2:
36:0f:84:ac:79:eb:10:e9:b0:eb:6a:b6:7b:0b:7d:1d:74:b8:
9b:65:ab:68:2a:2c:2c:dd:42:fd:c6:71:0b:cf:87:2d:f7:6b:
c8:0f:6e:05:7d:56:e2:23:58:58:f9:25:ba:16:85:47:90:d7:
96:20:fd:06:09:b6:8c:e0:2e:ae:55:d1:79:75:35:2c:31:5b:
3f:65:bc:cd:9c:87:42:a7:91:b1:9b:1e:5e:8e:f1:1a:bb:ca:
2d:47:f0:ac:90:63:7e:86:bf:d6:e4:6b:d3:d6:d3:01:8e:05:
8a:67:58:b8:ff:f7:a6:84:0d:49:1b:50:5b:3f:3a:0b:25:0b:
f2:12:8b:5c:d3:79:57:8d:36:82:ce:ff:26:11:b7:a9:f1:1a:
99:ed:ad:82:3e:c8:11:6e:eb:d3:3c:1c:1c:38:c0:41:9a:e1:
5e:53:cf:3e:15:20:57:eb:ee:e2:3f:48:a5:f1:be:19:d1:01:
6a:23:0c:0c:1d:fb:3f:2f:a2:b5:bd:ea:6e:a3:1b:46:ce:2e:
02:67:af:33:26:98:aa:d5:4b:d2:a9:36:c5:26:3b:5b:0f:8b:
1e:88:c1:e5
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8Fhzube
Rr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019e
WIZlD6GEZQbR3IvJx3PIjGov5cSr0R2K
-----END PUBLIC KEY-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6271844772424770508 (0x570a119742c4e3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = IT, L = Milan, O = Actalis S.p.A./03358520967, CN = Actalis Authentication Root CA
Validity
Not Before: Sep 22 11:22:02 2011 GMT
Not After : Sep 22 11:22:02 2030 GMT
Subject: C = IT, L = Milan, O = Actalis S.p.A./03358520967, CN = Actalis Authentication Root CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (4096 bit)
Modulus:
00:a7:c6:c4:a5:29:a4:2c:ef:e5:18:c5:b0:50:a3:
6f:51:3b:9f:0a:5a:c9:c2:48:38:0a:c2:1c:a0:18:
7f:91:b5:87:b9:40:3f:dd:1d:68:1f:08:83:d5:2d:
1e:88:a0:f8:8f:56:8f:6d:99:02:92:90:16:d5:5f:
08:6c:89:d7:e1:ac:bc:20:c2:b1:e0:83:51:8a:69:
4d:00:96:5a:6f:2f:c0:44:7e:a3:0e:e4:91:cd:58:
ee:dc:fb:c7:1e:45:47:dd:27:b9:08:01:9f:a6:21:
1d:f5:41:2d:2f:4c:fd:28:ad:e0:8a:ad:22:b4:56:
65:8e:86:54:8f:93:43:29:de:39:46:78:a3:30:23:
ba:cd:f0:7d:13:57:c0:5d:d2:83:6b:48:4c:c4:ab:
9f:80:5a:5b:3a:bd:c9:a7:22:3f:80:27:33:5b:0e:
b7:8a:0c:5d:07:37:08:cb:6c:d2:7a:47:22:44:35:
c5:cc:cc:2e:8e:dd:2a:ed:b7:7d:66:0d:5f:61:51:
22:55:1b:e3:46:e3:e3:3d:d0:35:62:9a:db:af:14:
c8:5b:a1:cc:89:1b:e1:30:26:fc:a0:9b:1f:81:a7:
47:1f:04:eb:a3:39:92:06:9f:99:d3:bf:d3:ea:4f:
50:9c:19:fe:96:87:1e:3c:65:f6:a3:18:24:83:86:
10:e7:54:3e:a8:3a:76:24:4f:81:21:c5:e3:0f:02:
f8:93:94:47:20:bb:fe:d4:0e:d3:68:b9:dd:c4:7a:
84:82:e3:53:54:79:dd:db:9c:d2:f2:07:9b:2e:b6:
bc:3e:ed:85:6d:ef:25:11:f2:97:1a:42:61:f7:4a:
97:e8:8b:b1:10:07:fa:65:81:b2:a2:39:cf:f7:3c:
ff:18:fb:c6:f1:5a:8b:59:e2:02:ac:7b:92:d0:4e:
14:4f:59:45:f6:0c:5e:28:5f:b0:e8:3f:45:cf:cf:
af:9b:6f:fb:84:d3:77:5a:95:6f:ac:94:84:9e:ee:
bc:c0:4a:8f:4a:93:f8:44:21:e2:31:45:61:50:4e:
10:d8:e3:35:7c:4c:19:b4:de:05:bf:a3:06:9f:c8:
b5:cd:e4:1f:d7:17:06:0d:7a:95:74:55:0d:68:1a:
fc:10:1b:62:64:9d:6d:e0:95:a0:c3:94:07:57:0d:
14:e6:bd:05:fb:b8:9f:e6:df:8b:e2:c6:e7:7e:96:
f6:53:c5:80:34:50:28:58:f0:12:50:71:17:30:ba:
e6:78:63:bc:f4:b2:ad:9b:2b:b2:fe:e1:39:8c:5e:
ba:0b:20:94:de:7b:83:b8:ff:e3:56:8d:b7:11:e9:
3b:8c:f2:b1:c1:5d:9d:a4:0b:4c:2b:d9:b2:18:f5:
b5:9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Authority Key Identifier:
52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
0b:7b:72:87:c0:60:a6:49:4c:88:58:e6:1d:88:f7:14:64:48:
a6:d8:58:0a:0e:4f:13:35:df:35:1d:d4:ed:06:31:c8:81:3e:
6a:d5:dd:3b:1a:32:ee:90:3d:11:d2:2e:f4:8e:c3:63:2e:23:
66:b0:67:be:6f:b6:c0:13:39:60:aa:a2:34:25:93:75:52:de:
a7:9d:ad:0e:87:89:52:71:6a:16:3c:19:1d:83:f8:9a:29:65:
be:f4:3f:9a:d9:f0:f3:5a:87:21:71:80:4d:cb:e0:38:9b:3f:
bb:fa:e0:30:4d:cf:86:d3:65:10:19:18:d1:97:02:b1:2b:72:
42:68:ac:a0:bd:4e:5a:da:18:bf:6b:98:81:d0:fd:9a:be:5e:
15:48:cd:11:15:b9:c0:29:5c:b4:e8:88:f7:3e:36:ae:b7:62:
fd:1e:62:de:70:78:10:1c:48:5b:da:bc:a4:38:ba:67:ed:55:
3e:5e:57:df:d4:03:40:4c:81:a4:d2:4f:63:a7:09:42:09:14:
fc:00:a9:c2:80:73:4f:2e:c0:40:d9:11:7b:48:ea:7a:02:c0:
d3:eb:28:01:26:58:74:c1:c0:73:22:6d:93:95:fd:39:7d:bb:
2a:e3:f6:82:e3:2c:97:5f:4e:1f:91:94:fa:fe:2c:a3:d8:76:
1a:b8:4d:b2:38:4f:9b:fa:1d:48:60:79:26:e2:f3:fd:a9:d0:
9a:e8:70:8f:49:7a:d6:e5:bd:0a:0e:db:2d:f3:8d:bf:eb:e3:
a4:7d:cb:c7:95:71:e8:da:a3:7c:c5:c2:f8:74:92:04:1b:86:
ac:a4:22:53:40:b6:ac:fe:4c:76:cf:fb:94:32:c0:35:9f:76:
3f:6e:e5:90:6e:a0:a6:26:a2:b8:2c:be:d1:2b:85:fd:a7:68:
c8:ba:01:2b:b1:6c:74:1d:b8:73:95:e7:ee:b7:c7:25:f0:00:
4c:00:b2:7e:b6:0b:8b:1c:f3:c0:50:9e:25:b9:e0:08:de:36:
66:ff:37:a5:d1:bb:54:64:2c:c9:27:b5:4b:92:7e:65:ff:d3:
2d:e1:b9:4e:bc:7f:a4:41:21:90:41:77:a6:39:1f:ea:9e:e3:
9f:d0:66:6f:05:ec:aa:76:7e:bf:6b:16:a0:eb:b5:c7:fc:92:
54:2f:2b:11:27:25:37:78:4c:51:6a:b0:f3:cc:58:5d:14:f1:
6a:48:15:ff:c2:07:b6:b1:8d:0f:8e:5c:50:46:b3:3d:bf:01:
98:4f:b2:59:54:47:3e:34:7b:78:6d:56:93:2e:73:ea:66:28:
78:cd:1d:14:bf:a0:8f:2f:2e:b8:2e:8e:f2:14:8a:cc:e9:b5:
7c:fb:6c:9d:0c:a5:e1:96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-----END PUBLIC KEY-----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-----END CERTIFICATE-----"
}
Pricing
To perform an SSL certificate lookup through the API, you will need API credits. Credits are only deducted for successful queries, defined by a 2xx status code. If a request results in a 4xx or 5xx status code, no credits will be deducted, and any credits already charged will be refunded.
- SSL Certificate Lookup: For each successful request without the certificate chain, 16 credits will be charged.
- SSL Certificate Chain Lookup: For each successfully retrieved certificate in the chain, 8 credits will be charged. To use the SSL certificate chain lookup feature, you must have a minimum of 32 credits available in your plan.
Utilize the Credits Usage API to efficiently monitor your recent consumption of both one-off and subscription credits. This API provides a streamlined way to track and manage your credit usage, ensuring you stay informed about your remaining balance and can optimize your resource allocation effectively.