# SSL Certificate Audit API
Inspect HTTPS certificate identity, issuer, validity, and expiry.
## API Overview
- **HTTP Protocol:** HTTPS
- **HTTP Method:** GET
- **HTTP Endpoint:** https://api.gugudata.io/v1/websitetools/sslcertinfo
- **Response Type:** application/json; charset=utf-8
- **DEMO Endpoint:** https://api.gugudata.io/v1/websitetools/sslcertinfo/demo
- **Live Demo:** https://gugudata.io/demo/sslcertinfo
- **Postman:** https://www.postman.com/gugudata/gugudata-io
- **LLM Page:** https://gugudata.io/details/sslcertinfo/llm
- **Raw Markdown:** https://gugudata.io/details/sslcertinfo/llm.md
## Remote MCP
- **MCP Endpoint:** https://mcp.gugudata.io/mcp
- **MCP Guide:** https://gugudata.io/mcp/
- **Authorization:** OAuth authorization opens in the browser; do not paste appkeys into MCP clients.
- **Tool Scope:** MCP clients receive GuGuData API tools available to the authorized account.
## Data & API Features
- SSL certificate inspection: Inspect certificate details for a target HTTPS domain and use the result for monitoring, support, and security review.
- Issuer and validity fields: Return issuer, subject, validity dates, and certificate status fields when available from the target domain.
- Expiry monitoring support: Use the response to detect upcoming certificate expiration before it affects production websites or customer domains.
- Domain coverage review: Check certificate domain coverage and chain details when debugging HTTPS, CDN, or deployment issues.
- Security audit workflow: Feed certificate data into domain audits, onboarding checks, infrastructure dashboards, and compliance review tools.
- Standalone HTTPS audit API: Buy this interface independently when your workflow needs SSL certificate review without broader domain intelligence.
## API Request Parameters
| Name | Type | Is Required | Default Value | Remark |
| --- | --- | --- | --- | --- |
| appkey | string | true | YOUR_APPKEY | API key used to authenticate the request. |
| domain | string | true | YOUR_VALUE | Domain name or HTTPS origin to inspect. |
## API Response Parameters
| Name | Type | Remark |
| --- | --- | --- |
| dataStatus.requestParameter | string | Privacy-safe summary of the normalized request. |
| dataStatus.statusCode | integer | Application-level status code. |
| dataStatus.status | string | Application-level result status. |
| dataStatus.statusDescription | string | Human-readable application status message. |
| dataStatus.responseDateTime | string | Time at which the response was generated. |
| dataStatus.dataTotalCount | integer | Number of matching or returned records for this request. |
| data.subjectDN | string | Subject Distinguished Name. |
| data.issuerDN | string | Issuer Distinguished Name. |
| data.serialNumber | string | Serial number. |
| data.validFrom | string | Valid from date. |
| data.validTo | string | Valid to date. |
| data.signatureAlgorithm | string | Signature algorithm. |
| data.publicKey | string | Public key information. |
| data.keyUsage | string | Key usage. |
| data.extendedKeyUsage | string | Extended key usage. |
| data.basicConstraints | string | Basic constraints. |
| data.subjectAlternativeNames | string | Subject Alternative Names. |
| data.issuerAlternativeNames | string | Issuer Alternative Names. |
| data.version | string | Certificate version. |
| data.signature | string | Certificate signature. |
| data.publicKeyAlgorithm | string | Public key algorithm. |
| data.extensions | string | Certificate extensions information. |
## API Response Status Codes
| Status Code | Explanation of Status Code | Remarks |
| --- | --- | --- |
| 200 | Request processed successfully. | Some endpoints expose a separate application-level status field in the response body, such as `dataStatus.statusCode`. |
| 400 | Invalid request parameters or request format. | Check required fields, data types, and request body format. |
| 401 | Missing or unknown application key. | Provide a valid `appkey` with the request. |
| 403 | The application key is recognized but access is not allowed. | The key may be expired, inactive, or not permitted for the requested API. |
| 429 | Request rate or trial usage limit exceeded. | Reduce request frequency and retry with backoff. If a trial allowance is exhausted, check Trial Keys for remaining requests and subscribe to continue. |
| 500 | Internal service error. | Retry later or contact support if the error persists. |
| 503 | Upstream service unavailable. | Retry later; the requested upstream dependency is temporarily unavailable. |
## cURL Example
```bash
curl --location 'https://api.gugudata.io/v1/websitetools/sslcertinfo?appkey=YOUR_APPKEY&domain=YOUR_VALUE'
```