All projects matching “certification”

SSL/TLS certificate check: expiry, issuer, SANs, chain validity, hostname match, negotiated protocol/cipher, and weak-algo warnings for a public HTTPS host. Clean JSON.

Open an SSL/TLS connection to a host and report its certificate — issuer, subject, validity window, days remaining, SANs, fingerprint and trust status.

Reads the constraints inside a single certificate — basic constraints, key usage, extended key usage — and reports, per role, whether the certificate permits being used that way under the pinned OpenSSL build's rules. Roles covered are TLS client, TLS server, S/MIME signing and encryption, and timestamp signing. This answers the frequent confusion where a certificate is deployed for a purpose its

CoverBureau: pay-per-call compliance checking for US certificates of insurance (ACORD 25). Needs NO document: give an NAIC number or carrier name plus a state, and get recognition status, financial-strength rating, and whether it meets your threshold. Use it when you have a carrier but no certificate; validate_coi already checks the carrier when you do. Carrier data is a seed dataset; each respons

Domain and email security check: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, DNSSEC (validated by Cloudflare and Google), CAA, BIMI with its mark certificate, mail IPs on the UCEPROTECT Level 1 blocklist, TLS certificate, registrar and domain age, and Microsoft 365 tenant, each graded with the exact record to fix it, plus a 0-100 score

OrionCMD Checks: Certificate status from CT logs + live HTTPS probe. Issuer, validity, days left, % of lifetime used, renewal cadence and a renewal-stall heuristic from Certificate Transparency logs (NOT the live served cert), plus a live HTTPS pass/fail probe from Cloudflare's edge.

Verify a US healthcare facility by CMS Certification Number (CCN). Returns Medicare certification status, provider type, bed count, ownership type, accreditation, address, and phone. Source: CMS Provider of Services File (public domain).

Look up an employer's PERM (permanent labor certification / green-card sponsorship) filing history from public DOL OFLC disclosure data, fiscal years 2022-2026. Returns applications filed, certified/denied/withdrawn counts, certification rate, median offered wage (annualized), top job titles and SOC occupations, and most recent filing activity. Public-domain federal data.

Full-domain intelligence report in one call: complete DNS sweep (A/AAAA/MX/NS/TXT/SOA/CNAME), RDAP registration data (registrar, dates, statuses), DNSSEC presence, mail posture summary (SPF/DMARC/DKIM selectors), TLS certificate snapshot (issuer, expiry, protocol), Certificate Transparency subdomain census, and HTTP probe (status, redirects, https enforcement, server header) — each section scored,

Domain OSINT, TLS Certificate & Security Headers Recon (/v1/domain-osint) — Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (https://domain-osint.agentdiet.dev/v1/domain-osint)

Use when you need to know whether a website or mail server has a valid HTTPS certificate or when it expires: opens a live TLS connection (SNI) to the host and returns whether the chain is publicly trusted (with the exact error, e.g. CERT_HAS_EXPIRED or self-signed), whether the certificate matches the hostname, validity dates and days remaining, subject, issuer, SAN list, key type, TLS protocol, c

Entry point to the x402 Carbon Retirement API on Base. Returns every endpoint you need plus a live snapshot of the top 3 carbon classes and marketplace listings by liquidity. Discover, quote and certificate are free. Retiring is paid: each retirement costs the credit price plus a fee, sent from your own wallet (prepare/retire) or relayed from a signed USDC authorization (prepare-auth + POST action

UK Energy Performance Certificate (EPC) ratings by postcode.

Request an https URL and report whether it is reachable, its status, every redirect hop with timings, key and security headers (HSTS, CSP and others), and the TLS certificate with its issuer, the names it covers and the days until it expires. An unreachable URL is a result too, with the reason.

Import/export regulation study by country and product, returns tariffs, certifications, restrictions and compliance steps

Accessible transport place allocation audit on the actual proposed delivery routes. Sum declared wheelchair_places across all jobs of each active route and compare with vehicle wheelchair_places. No pickup occupancy or certification inferred. Uses the paid-qualified existing VRP planner unchanged, then checks this business rule against the actual proposed route. A rule violation yields dispatch_re

Check an x402 endpoint BEFORE paying it. Makes one unpaid request (never sends money), decodes the 402 terms, and verifies: the asset is a real USD stablecoin on that network, the price in USD vs your max_price_usd cap (default $0.50), payTo is a sane address (and matches expected_pay_to if given), HTTPS and certificate validity, redirects, and domain age. Returns safe_to_pay, a risk level, findin

One call, whole outside view of a domain: DNS records, email authentication grade (SPF, DMARC, MTA-STS), TLS certificate expiry and chain, post-quantum key exchange (X25519MLKEM768), HTTPS security headers, and a to-do list.

PKCS#10 certificate signing request (CSR) inspector — parse requested identities and public-key metadata, calculate a fingerprint, and check the included self-signature without CA approval claims.

Request an https URL and report whether it is reachable, its status, every redirect hop with timings, key and security headers (HSTS, CSP and others), and the TLS certificate with its issuer, the names it covers and the days until it expires. An unreachable URL is a result too, with the reason.

Student-loan fix screen: routes a problem to the correct legal lane — federal false-certification or closed-school discharge (34 CFR 685.215/685.214, with the 180-day window math), PSLF reconsideration/buyback (685.219(g), 90-day window), or a California AB 376 servicer demand ($500/violation statutory floor, treble for forgiveness interference) — with verbatim citations, deadline math, documentat

Pay Guard: pre-payment allow/warn/block check for x402. Send your planned purchase (domain, max_price_usd, asset/network) plus the 402 challenge (payTo, amount, asset, network, resource). Returns verdict with wallet↔domain verification, price/asset/network checks, lookalike/URL safety, wash flags from Agentropolis, and a free OFAC SDN sanctions screen of payTo (a screen, not a certificate). Determ

Prove what a web page showed: verify completed work, freeze evidence for a dispute, certify a page before you rely on it. Two independent observers on separate networks capture your URL at one frozen instant: byte-identical is CERTIFIED; disagreement is WITNESSED with pixel agreement and diff map. Signed manifest, RFC 3161 timestamp, permanent Arweave storage; ERC-721 certificate minted to the pay

Look up a domain: registration data from RDAP (registrar, created, expires, status, nameservers), live DNS records (A, AAAA, MX, NS, TXT, CNAME), the TLS certificate served at the name (issuer, validity, alternative names, fingerprint), and the HTTP front door (status, server, redirect). One JSON answer, no API key, no rate-limited WHOIS. GET with ?name= or POST. $0.005.

Supplier and vendor risk score for any company domain. Returns a 0-100 stability score, risk tier, and named risk flags, with subsignals: domain age/expiry (WHOIS), TLS certificate status, DNS health (A/MX/SPF/DMARC), and 30-day news sentiment. Use for supplier due diligence and third-party domain screening before purchasing from, integrating with, or paying an unfamiliar vendor or counterparty. C

Password - CASA Cybersecurity Assessment - Consolidates evidence on secure communications, including certificate validity, hostname matching, protocol and cipher strength, forward secrecy, and TLS vulnerabilities. It determines whether the service uses a secure, authentic, and correctly configured transport channel.

Checks one or more domains to see whether they are set up to show a brand logo next to emails in Gmail, Apple Mail, and Yahoo. It looks up the BIMI settings the domain has published, checks the logo file follows the required format, checks any logo certificate is valid and unexpired, and confirms the domain has strict enough email protection turned on. Returns a clear pass or fail per domain, plus

Independently fetch, hash, timestamp and archive a URL or API response; returns a signed certificate. Merkle-anchored on Base hourly. Neutral third-party evidence for agent commerce disputes.

Performs comprehensive URL health checks, measuring response time, status code, security headers, and TLS/SSL certificate validity. Route: GET /paid/health-check?url=https://example.com. Ideal for automated monitoring and endpoint auditing.

Check whether a domain's TLS/SSL certificate is valid, trusted, and not expiring before connecting to it. Performs a live handshake and returns a 0–100 score and tier (VALID/WEAK/EXPIRING/EXPIRED/UNTRUSTED/INVALID) with chain trust, days-to-expiry, signature algorithm, TLS version, and cipher quality. Use before submitting credentials, posting to a webhook, or following a payment link, to catch ex