SSL Health Inspector
Inspect SSL certificate details for a domain, including validity, expiry and chain health
Parameters
| name | in | type | required | description |
|---|---|---|---|---|
domain |
query | string | required | Without https:// |
port |
query | number | optional |
Default is 443 (HTTPS)
range 1 to 65535
default 443
|
Request
Send your key in the X-API-Key header. More languages and patterns live on the
code examples page.
curl -s "https://apixies.io/api/v1/inspect-ssl?domain=stripe.com" \ -H "X-API-Key: YOUR_API_KEY"
Response
The result sits under data in the standard envelope. See the
response format guide for errors and status codes.
returns
- data.days_until_expiry
- Days left before the certificate expires.
- data.valid
- True when the cert is current, matches the domain and isn't self-signed.
- data.valid_to
- Expiry date of the certificate, with the start date in valid_from.
- data.issuer
- The certificate authority that signed it.
- data.alt_names
- Every hostname the certificate covers.
- data.validation_issues
- Problems found, like an expired cert or a hostname mismatch.
{
"status": "success",
"http_code": 200,
"code": "SUCCESS",
"message": "SSL inspection successful",
"data": {
"domain": "stripe.com",
"port": 443,
"valid": true,
"issuer": "C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1",
"subject": "jurisdictionC=US, jurisdictionST=Delaware, businessCategory=Private Organization, serialNumber=4675506, C=US, ST=California, L=South San Francisco, O=Stripe, LLC, CN=stripe.com",
"common_name": "stripe.com",
"alt_names": [
"stripe.com",
"www.stripe.com"
],
"valid_from": "2026-07-28 00:00:00",
"valid_to": "2026-11-12 23:59:59",
"days_until_expiry": 55,
"is_self_signed": false,
"signature_algorithm": "ecdsa-with-SHA384",
"validation_issues": []
}
}
Authentication and limits
This endpoint needs an API key. Use the sandbox ("try it" above) to test it without registering. See the authentication guide for details.
Standard rate limits apply to this endpoint.
Common use cases
Monitor certificate expiry in CI/CD
Integrate the SSL Health Inspector into your deployment pipeline to catch expiring certificates before they cause downtime. Set up alerts when certificates have fewer than 30 days remaining.
Build a domain monitoring dashboard
Combine with the DNS Lookup and Security Headers endpoints to create a comprehensive domain health dashboard that tracks SSL status alongside DNS configuration and security posture.
Audit client websites
Web agencies can batch-check SSL certificates across all client domains, generating automated reports on certificate validity and upcoming renewals.
related endpoints
guides
More documentation
Get a free API key
A temporary key takes one click and no signup. Register and you get 75 requests/day. Free tier is for development & small projects.