SearchCtrl+K

SSL Certificate Lookup API Reference

Retrieve SSL certificate details for any domain. Get comprehensive information including issuer, validity period, public key, subject alternative names, and raw certificate data.

GEThttps://api.apifreaks.com/v1.0/domain/ssl/live

Test

Pass the domain name as a query parameter. The response includes a single end-user certificate. Use the chain endpoint for the full certificate chain.

Getting Started

Authentication

Authorize every request with your API key, passed either as a header or as a query parameter:

Header - X-apiKey
Query parameter - apiKey

API Version

This is version v1.0 of the API.

LANGUAGE

curl -X 'GET' \
  'https://api.apifreaks.com/v1.0/domain/ssl/live?domainName=google.com' \
  -H 'X-apiKey: API-KEY'

Response

{
  "domainName": "google.com",
  "queryTime": "2026-06-06 14: 58: 44",
  "sslCertificates": [
    {
      "chainOrder": "end-user",
      "authenticationType": "domain",
      "validityStartDate": "2026-05-18 18: 35: 21 UTC",
      "validityEndDate": "2026-08-10 18: 35: 20 UTC",
      "serialNumber": "d5: 2a: 59: 68: 49:a3:ce: 9b: 10: 64: 16: 9b:c7:eb:df: 4b",
      "signatureAlgorithm": "SHA256-RSA",
      "subject": {
        "commonName": "*.google.com"
      },
      "issuer": {
        "commonName": "WR2",
        "organization": "Google Trust Services",
        "country": "US"
      },
      "publicKey": {
        "keySize": "256 bit",
        "keyAlgorithm": "ECDSA",
        "pemRaw": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAErGwQHDlGZHg4bCpvaBQKF07hm4v6puRsRi7O6JQH78GTcBkGAHRZSLqvlH8K+wDBOiTKlDh3sWlmEJDUJDdoKA==\n-----END PUBLIC KEY-----\n"
      },
      "extensions": {
        "authorityKeyIdentifier": "DE: 1B: 1E:ED: 79: 15:D4: 3E: 37: 24:C3: 21:BB:EC: 34: 39: 6D: 42:B2: 30",
        "subjectKeyIdentifier": "2E:EC: 34:B9: 3E: 97: 83:C3: 7E:E5:D0:F4:AB: 56:D4: 25: 99: 67: 7D: 6B",
        "keyUsages": [
          "Digital Signature"
        ],
        "extendedKeyUsages": [
          "TLS Web Server Authentication"
        ],
        "crlDistributionPoints": [
          "http://c.pki.goog/wr2/GSyT1N4PBrg.crl"
        ],
        "authorityInfoAccess": {
          "issuers": [
            "http://i.pki.goog/wr2.crt"
          ],
          "ocsp": [
            "http://o.pki.goog/wr2"
          ]
        },
        "subjectAlternativeNames": {
          "dnsNames": [
            "*.google.com",
            "google.com",
            "youtube.com",
            "*.youtube.com",
            "*.ytimg.com"
          ]
        },
        "certificatePolicies": [
          {
            "policyId": "2.23.140.1.2.1"
          }
        ]
      },
      "pemRaw": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----\n"
    }
  ]
}

API Request

Query Parameters

The following query parameters control the SSL lookup.

formatoptionalStringdefault: json

Response format: 'json' (default) or 'xml'.

domainNamerequiredString

Domain name or URL whose SSL certificate lookup is required

sslRawoptionalBooleandefault: false

For getting the raw openSSL response of the domain.

API Response Schema

A successful request returns a 200 OK response with a JSON object containing the SSL certificate details for the queried domain, including issuer, validity period, public key, and extensions.

domainName

Stringmandatory

Domain for which the certificate is queried.

queryTime

Stringmandatory

Time when the query was made.

sslRaw

Stringoptional

Raw OpenSSL output for the certificate. Only present when sslRaw parameter is set to true.

chainOrder (String), authenticationType (String), validityStartDate (String), validityEndDate (String), serialNumber (String), …

Custom Response Headers

Besides the response body, every response carries custom headers you can use to track credit usage, and concurrency usage on endpoints that enforce a concurrency limit. See the Custom Response Headers documentation and the endpoints with concurrency limits for more details.

X-Concurrent-Threadsheaderconcurrency-limited endpoints

Specifies the maximum number of concurrent requests allowed.

X-Concurrent-Threads-Activeheaderconcurrency-limited endpoints

Indicates the number of active concurrent requests being processed.

X-AF-Credits-Costheaderall responses

Specifies the number of credits consumed by the current request.

Error Status & Codes

See the HTTP Status Codes documentation for a complete reference of common API errors and HTTP status codes.

400

Please pass domain param correct value [For Technical Support: support@apifreaks.com]

403

Unavailable domain extension.

404

No Ssl Certificate exists for this Domain

SSL Certificate Lookup API Reference

Retrieve SSL certificate details for any domain. Get comprehensive information including issuer, validity period, public key, subject alternative names, and raw certificate data.

GEThttps://api.apifreaks.com/v1.0/domain/ssl/live

Test

Pass the domain name as a query parameter. The response includes a single end-user certificate. Use the chain endpoint for the full certificate chain.

Getting Started

Authentication

Authorize every request with your API key, passed either as a header or as a query parameter:

Header - X-apiKey
Query parameter - apiKey

API Version

This is version v1.0 of the API.

LANGUAGE

curl -X 'GET' \
  'https://api.apifreaks.com/v1.0/domain/ssl/live?domainName=google.com' \
  -H 'X-apiKey: API-KEY'

Response

{
  "domainName": "google.com",
  "queryTime": "2026-06-06 14: 58: 44",
  "sslCertificates": [
    {
      "chainOrder": "end-user",
      "authenticationType": "domain",
      "validityStartDate": "2026-05-18 18: 35: 21 UTC",
      "validityEndDate": "2026-08-10 18: 35: 20 UTC",
      "serialNumber": "d5: 2a: 59: 68: 49:a3:ce: 9b: 10: 64: 16: 9b:c7:eb:df: 4b",
      "signatureAlgorithm": "SHA256-RSA",
      "subject": {
        "commonName": "*.google.com"
      },
      "issuer": {
        "commonName": "WR2",
        "organization": "Google Trust Services",
        "country": "US"
      },
      "publicKey": {
        "keySize": "256 bit",
        "keyAlgorithm": "ECDSA",
        "pemRaw": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAErGwQHDlGZHg4bCpvaBQKF07hm4v6puRsRi7O6JQH78GTcBkGAHRZSLqvlH8K+wDBOiTKlDh3sWlmEJDUJDdoKA==\n-----END PUBLIC KEY-----\n"
      },
      "extensions": {
        "authorityKeyIdentifier": "DE: 1B: 1E:ED: 79: 15:D4: 3E: 37: 24:C3: 21:BB:EC: 34: 39: 6D: 42:B2: 30",
        "subjectKeyIdentifier": "2E:EC: 34:B9: 3E: 97: 83:C3: 7E:E5:D0:F4:AB: 56:D4: 25: 99: 67: 7D: 6B",
        "keyUsages": [
          "Digital Signature"
        ],
        "extendedKeyUsages": [
          "TLS Web Server Authentication"
        ],
        "crlDistributionPoints": [
          "http://c.pki.goog/wr2/GSyT1N4PBrg.crl"
        ],
        "authorityInfoAccess": {
          "issuers": [
            "http://i.pki.goog/wr2.crt"
          ],
          "ocsp": [
            "http://o.pki.goog/wr2"
          ]
        },
        "subjectAlternativeNames": {
          "dnsNames": [
            "*.google.com",
            "google.com",
            "youtube.com",
            "*.youtube.com",
            "*.ytimg.com"
          ]
        },
        "certificatePolicies": [
          {
            "policyId": "2.23.140.1.2.1"
          }
        ]
      },
      "pemRaw": "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----\n"
    }
  ]
}

API Request

Query Parameters

The following query parameters control the SSL lookup.

formatoptionalStringdefault: json

Response format: 'json' (default) or 'xml'.

domainNamerequiredString

Domain name or URL whose SSL certificate lookup is required

sslRawoptionalBooleandefault: false

For getting the raw openSSL response of the domain.

API Response Schema

A successful request returns a 200 OK response with a JSON object containing the SSL certificate details for the queried domain, including issuer, validity period, public key, and extensions.

domainName

Stringmandatory

Domain for which the certificate is queried.

queryTime

Stringmandatory

Time when the query was made.

sslRaw

Stringoptional

Raw OpenSSL output for the certificate. Only present when sslRaw parameter is set to true.

chainOrder (String), authenticationType (String), validityStartDate (String), validityEndDate (String), serialNumber (String), …

Custom Response Headers

X-Concurrent-Threadsheaderconcurrency-limited endpoints

Specifies the maximum number of concurrent requests allowed.

X-Concurrent-Threads-Activeheaderconcurrency-limited endpoints

Indicates the number of active concurrent requests being processed.

X-AF-Credits-Costheaderall responses

Specifies the number of credits consumed by the current request.

Error Status & Codes

See the HTTP Status Codes documentation for a complete reference of common API errors and HTTP status codes.

400

Please pass domain param correct value [For Technical Support: support@apifreaks.com]

403

Unavailable domain extension.

404

No Ssl Certificate exists for this Domain

Quick Links

Quick Links

SSL Certificate Lookup API Reference

Getting Started

Authentication

API Version

API Request

Query Parameters

API Response Schema

Custom Response Headers

Error Status & Codes

Quick Links

Quick Links

SSL Certificate Lookup API Reference

Getting Started

Authentication

API Version

API Request

Query Parameters

API Response Schema

Custom Response Headers

Error Status & Codes

SSL Certificate Lookup API Reference

Getting Started

Authentication

API Version

API Request

Query Parameters

API Response Schema

Custom Response Headers

Error Status & Codes

More APIs in This Category

SSL Certificate Chain Lookup

SSL Certificate Lookup API Reference

Getting Started

Authentication

API Version

API Request

Query Parameters

API Response Schema

Custom Response Headers

Error Status & Codes

More APIs in This Category

SSL Certificate Chain Lookup