Skip to content
GET /api/v1/inspect-ssl

SSL Health Inspector

Inspect SSL certificate details for a domain, including validity, expiry and chain health

Parameters

name in type required description
domain query string required Without https://
port query number optional Default is 443 (HTTPS) range 1 to 65535 default 443

Request

Send your key in the X-API-Key header. More languages and patterns live on the code examples page.

curl -s "https://apixies.io/api/v1/inspect-ssl?domain=stripe.com" \
  -H "X-API-Key: YOUR_API_KEY"

Response

The result sits under data in the standard envelope. See the response format guide for errors and status codes.

returns

data.days_until_expiry
Days left before the certificate expires.
data.valid
True when the cert is current, matches the domain and isn't self-signed.
data.valid_to
Expiry date of the certificate, with the start date in valid_from.
data.issuer
The certificate authority that signed it.
data.alt_names
Every hostname the certificate covers.
data.validation_issues
Problems found, like an expired cert or a hostname mismatch.
example response 200
{
    "status": "success",
    "http_code": 200,
    "code": "SUCCESS",
    "message": "SSL inspection successful",
    "data": {
        "domain": "stripe.com",
        "port": 443,
        "valid": true,
        "issuer": "C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1",
        "subject": "jurisdictionC=US, jurisdictionST=Delaware, businessCategory=Private Organization, serialNumber=4675506, C=US, ST=California, L=South San Francisco, O=Stripe, LLC, CN=stripe.com",
        "common_name": "stripe.com",
        "alt_names": [
            "stripe.com",
            "www.stripe.com"
        ],
        "valid_from": "2026-07-28 00:00:00",
        "valid_to": "2026-11-12 23:59:59",
        "days_until_expiry": 55,
        "is_self_signed": false,
        "signature_algorithm": "ecdsa-with-SHA384",
        "validation_issues": []
    }
}

Authentication and limits

This endpoint needs an API key. Use the sandbox ("try it" above) to test it without registering. See the authentication guide for details.

Standard rate limits apply to this endpoint.

Common use cases

Monitor certificate expiry in CI/CD

Integrate the SSL Health Inspector into your deployment pipeline to catch expiring certificates before they cause downtime. Set up alerts when certificates have fewer than 30 days remaining.

Build a domain monitoring dashboard

Combine with the DNS Lookup and Security Headers endpoints to create a comprehensive domain health dashboard that tracks SSL status alongside DNS configuration and security posture.

Audit client websites

Web agencies can batch-check SSL certificates across all client domains, generating automated reports on certificate validity and upcoming renewals.

More documentation

Get a free API key

A temporary key takes one click and no signup. Register and you get 75 requests/day. Free tier is for development & small projects.

cookies

We use analytics cookies to see how the site gets used. Nothing loads until you accept. Privacy policy