--- title: SSL Lookup API - Check and Monitor SSL Certificate Chains version: 1.0.0 description: Retrieve comprehensive SSL certificate information for any domain including expiry dates, issuer details, signature algorithms, public key data, and certificate extensions. Supports extended key usages, CRL distribution points, authority info access, subject alternative names, and certificate policies. openapi: 3.1.1 servers: - https://api.apifreaks.com/v1.0 paths: 1 operations: 1 schemas: 13 --- ## Table of Contents - [SSL Lookup API - Check and Monitor SSL Certificate Chains v1.0.0](#ssl-lookup-api-check-and-monitor-ssl-certificate-chains-v100) - [Authentication](#authentication) - [SSL APIs](#ssl-apis) - [sslCertificateLookup](#sslcertificatelookup) - [Parameters](#parameters) - [Responses](#responses) - [Schemas](#schemas) - [SSLLookupResponse](#ssllookupresponse) - [SSLCertificateItem](#sslcertificateitem) - [SSLSubject](#sslsubject) - [SSLIssuer](#sslissuer) - [SSLPublicKey](#sslpublickey) - [SSLExtensions](#sslextensions) - [SSLAuthorityInfoAccess](#sslauthorityinfoaccess) - [SSLSubjectAlternativeNames](#sslsubjectalternativenames) - [SSLCertificatePolicy](#sslcertificatepolicy) - [SSLPolicyQualifier](#sslpolicyqualifier) - [SSLUserNotice](#sslusernotice) - [SSLUserNoticeRef](#sslusernoticeref) - [ErrorResponse](#errorresponse) # SSL Lookup API - Check and Monitor SSL Certificate Chains v1.0.0 Retrieve comprehensive SSL certificate information for any domain including expiry dates, issuer details, signature algorithms, public key data, and certificate extensions. Supports extended key usages, CRL distribution points, authority info access, subject alternative names, and certificate policies. Base URLs: * [https://api.apifreaks.com/v1.0](https://api.apifreaks.com/v1.0) ## Authentication * API Key (ApiKeyAuthHeader) - Parameter Name: **X-apiKey**, in: header. Pass your API key via the X-apiKey request header. * API Key (ApiKeyAuthQuery) - Parameter Name: **apiKey**, in: query. Pass your API key via the apiKey query parameter. ## SSL APIs ### sslCertificateLookup `GET /domain/ssl/live` *Retrieve the SSL certificate and any hidden information embedded within it for a domain.* Retrieve comprehensive SSL certificate information without the certificate chain. This endpoint provides detailed information about the SSL certificate including expiry dates, issuer details, and encryption methods. #### Parameters |Name|In|Type|Required|Description| |---|---|---|---|---| |format|query|string|false|Format of the response.| |domainName|query|string|true|Domain name or URL whose SSL certificate lookup is required| |sslRaw|query|boolean|false|Set to true to get the raw openSSL response of the domain| ##### Enumerated Values |Parameter|Value| |---|---| |format|json| |format|xml| > Example responses > Successful SSL certificate lookup response ```json { "domainName": "google.com", "queryTime": "2026-06-06 14:58:44", "sslCertificates": [ { "chainOrder": "end-user", "authenticationType": "domain", "validityStartDate": "2026-05-18 18:35:21 UTC", "validityEndDate": "2026-08-10 18:35:20 UTC", "serialNumber": "d5:2a:59:68:49:a3:ce:9b:10:64:16:9b:c7:eb:df:4b", "signatureAlgorithm": "SHA256-RSA", "subject": { "commonName": "*.google.com" }, "issuer": { "commonName": "WR2", "organization": "Google Trust Services", "country": "US" }, "publicKey": { "keySize": "256 bit", "keyAlgorithm": "ECDSA", "pemRaw": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAErGwQHDlGZHg4bCpvaBQKF07hm4v6puRsRi7O6JQH78GTcBkGAHRZSLqvlH8K+wDBOiTKlDh3sWlmEJDUJDdoKA==\n-----END PUBLIC KEY-----\n" }, "extensions": { "authorityKeyIdentifier": "DE:1B:1E:ED:79:15:D4:3E:37:24:C3:21:BB:EC:34:39:6D:42:B2:30", "subjectKeyIdentifier": "2E:EC:34:B9:3E:97:83:C3:7E:E5:D0:F4:AB:56:D4:25:99:67:7D:6B", "keyUsages": [ "Digital Signature" ], "extendedKeyUsages": [ "TLS Web Server Authentication" ], "crlDistributionPoints": [ "http://c.pki.goog/wr2/GSyT1N4PBrg.crl" ], "authorityInfoAccess": { "issuers": [ "http://i.pki.goog/wr2.crt" ], "ocsp": [ "http://o.pki.goog/wr2" ] }, "subjectAlternativeNames": { "dnsNames": [ "*.google.com", "google.com", "youtube.com", "*.youtube.com", "*.ytimg.com" ] }, "certificatePolicies": [ { "policyId": "2.23.140.1.2.1" } ] }, "pemRaw": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----\n" } ] } ``` > Bad Request – Invalid domain parameter ```json { "timestamp": "2025-08-14T10:21:23.349Z", "status": 400, "error": "Invalid Param Exception", "message": "Please pass domain param correct value[For Technical Support: support@apifreaks.com]", "path": "/v1.0/ssl/live" } ``` > Forbidden – Domain extension unavailable ```json { "timestamp": "2025-08-14T10:18:47.504Z", "status": 403, "error": "Forbidden", "message": "Unavailable domain extension.", "path": "/v1.0/ssl/live" } ``` > Not Found – No SSL certificate exists for entered domain ```json { "timestamp": "2025-08-14T10:18:28.465Z", "status": 404, "error": "SSL Data Not Found", "message": "No Ssl Certificate exists for entered Domain", "path": "/v1.0/ssl/live" } ``` #### Responses |Status|Meaning|Description|Schema| |---|---|---|---| |200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|Successful SSL certificate lookup response|[SSLLookupResponse](#ssllookupresponse)| |400|[Bad Request](https://tools.ietf.org/html/rfc7231#section-6.5.1)|Bad Request – Invalid domain parameter|[ErrorResponse](#errorresponse)| |403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden – Domain extension unavailable|[ErrorResponse](#errorresponse)| |404|[Not Found](https://tools.ietf.org/html/rfc7231#section-6.5.4)|Not Found – No SSL certificate exists for entered domain|[ErrorResponse](#errorresponse)| #### Response Headers |Status|Header|Type|Format|Description| |---|---|---|---|---| |200|X-AF-Credits-Cost|integer||Specifies the number of credits consumed by the current request.| |400|X-AF-Credits-Cost|integer||Specifies the number of credits consumed by the current request.| |403|X-AF-Credits-Cost|integer||Specifies the number of credits consumed by the current request.| |404|X-AF-Credits-Cost|integer||Specifies the number of credits consumed by the current request.| To perform this operation, you must be authenticated by means of one of the following methods: ApiKeyAuthHeader, ApiKeyAuthQuery ## Schemas ### SSLLookupResponse SSL certificate lookup response containing certificate details and extensions. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |domainName|string|true|none|Domain name or URL that was queried.| |queryTime|string|true|none|Timestamp when the query was executed, in `YYYY-MM-DD HH:mm:ss` format — not ISO 8601 (no `T` separator, no milliseconds, no `Z`).| |sslCertificates|[[SSLCertificateItem](#sslcertificateitem)]|true|none|Array of SSL certificate objects in the chain.| |sslRaw|string|false|none|Raw OpenSSL response text if sslRaw was set to true.| ### SSLCertificateItem A single SSL certificate in the certificate chain. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |chainOrder|string|true|none|Position in the certificate chain (end-user, intermediate, root).| |authenticationType|string|true|none|Authentication type (domain, organization, extended).| |validityStartDate|string|true|none|Certificate validity start date, in `YYYY-MM-DD HH:mm:ss UTC` format — not ISO 8601 (space-separated, literal `UTC` suffix instead of `Z`).| |validityEndDate|string|true|none|Certificate validity end date, in `YYYY-MM-DD HH:mm:ss UTC` format — not ISO 8601 (space-separated, literal `UTC` suffix instead of `Z`).| |serialNumber|string|true|none|Certificate serial number.| |signatureAlgorithm|string|true|none|Signature algorithm used (e.g., SHA256-RSA).| |subject|[SSLSubject](#sslsubject)|true|none|Subject information of the SSL certificate.| |issuer|[SSLIssuer](#sslissuer)|true|none|Issuer information of the SSL certificate.| |publicKey|[SSLPublicKey](#sslpublickey)|true|none|Public key details of the SSL certificate.| |extensions|[SSLExtensions](#sslextensions)|true|none|X.509 certificate extensions.| |pemRaw|string|true|none|Raw PEM-encoded certificate.| ### SSLSubject Subject information of the SSL certificate. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |commonName|string|true|none|Common name of the subject.| |organization|string|false|none|Organization of the subject.| |organizationalUnit|string|false|none|Organizational unit of the subject.| |locality|string|false|none|Locality of the subject.| |state|string|false|none|State of the subject.| |country|string|false|none|Country of the subject.| |incCountry|string|false|none|Incorporation country of the subject.| |incState|string|false|none|Incorporation state of the subject.| |businessCategory|string|false|none|Business category of the subject.| |street|string|false|none|Street address of the subject.| |postalCode|string|false|none|Postal code of the subject.| |serialNumber|string|false|none|Serial number of the subject.| ### SSLIssuer Issuer information of the SSL certificate. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |commonName|string|true|none|Common name of the issuer.| |organization|string|true|none|Organization of the issuer.| |organizationalUnit|string|false|none|Organizational unit of the issuer.| |locality|string|false|none|Locality of the issuer.| |state|string|false|none|State of the issuer.| |country|string|true|none|Country of the issuer.| |incCountry|string|false|none|Incorporation country of the issuer.| |incState|string|false|none|Incorporation state of the issuer.| |businessCategory|string|false|none|Business category of the issuer.| |street|string|false|none|Street address of the issuer.| |postalCode|string|false|none|Postal code of the issuer.| |serialNumber|string|false|none|Serial number of the issuer.| ### SSLPublicKey Public key details of the SSL certificate. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |keySize|string|true|none|Public key size (e.g., 256 bit).| |keyAlgorithm|string|true|none|Public key algorithm (e.g., ECDSA, RSA).| |pemRaw|string|true|none|Raw PEM-encoded public key.| ### SSLExtensions X.509 certificate extensions. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |authorityKeyIdentifier|string|false|none|Authority key identifier.| |subjectKeyIdentifier|string|false|none|Subject key identifier.| |keyUsages|[string]|true|none|Key usage extensions.| |extendedKeyUsages|[string]|false|none|Extended key usage extensions.| |crlDistributionPoints|[string]|false|none|CRL distribution point URLs.| |authorityInfoAccess|[SSLAuthorityInfoAccess](#sslauthorityinfoaccess)|false|none|Authority information access details.| |subjectAlternativeNames|[SSLSubjectAlternativeNames](#sslsubjectalternativenames)|false|none|Subject alternative names on the certificate.| |certificatePolicies|[[SSLCertificatePolicy](#sslcertificatepolicy)]|false|none|Certificate policy objects.| ### SSLAuthorityInfoAccess Authority information access details. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |issuers|[string]|false|none|Issuer certificate URLs.| |ocsp|[string]|false|none|OCSP responder URLs.| ### SSLSubjectAlternativeNames Subject alternative names on the certificate. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |dnsNames|[string]|false|none|DNS names on the certificate.| |emailAddresses|[string]|false|none|Email addresses on the certificate.| |ipAddresses|[string]|false|none|IP addresses on the certificate.| |uris|[string]|false|none|URIs on the certificate.| ### SSLCertificatePolicy A certificate policy object. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |policyId|string|false|none|Policy OID identifier.| |policyQualifier|[SSLPolicyQualifier](#sslpolicyqualifier)|false|none|Policy qualifier for a certificate policy.| ### SSLPolicyQualifier Policy qualifier for a certificate policy. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |oid|string|false|none|OID of the policy qualifier.| |cpsUri|string(uri)|false|none|CPS URI for the policy qualifier.| |userNotice|[SSLUserNotice](#sslusernotice)|false|none|User notice for a policy qualifier.| ### SSLUserNotice User notice for a policy qualifier. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |explicitText|string|false|none|Explicit text of the user notice.| |noticeRef|[SSLUserNoticeRef](#sslusernoticeref)|false|none|Notice reference for a user notice.| ### SSLUserNoticeRef Notice reference for a user notice. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |organization|string|false|none|Organization for the notice reference.| |noticeNumbers|string|false|none|Notice numbers.| ### ErrorResponse Standard error envelope returned by the API on failed requests. #### Properties |Name|Type|Required|Restrictions|Description| |---|---|---|---|---| |error|string|false|none|Short error category or exception type.| |message|string|true|none|Human-readable error message describing the failure.| |path|string|false|none|API endpoint path that produced the error.| |status|integer|false|none|HTTP status code returned with the error.| |timestamp|string(date-time)|false|none|Timestamp when the error occurred (ISO 8601).|