Certificate Chain

What It Does

Performs a TLS handshake to confirm the certificate chain is trusted, then retrieves certificate metadata from Certificate Transparency logs (crt.sh). Returns the leaf certificate details including subject, issuer, SANs, validity dates, days until expiration, key type, and certificate validation level (DV/OV/EV). Detects issues like expired certificates, certificates expiring soon, self-signed leaves, and weak signature algorithms.

Why It's Useful

Expired or misconfigured certificates cause outages and browser warnings. This endpoint lets you monitor certificate expiration, verify deployments, and audit certificate security — all from a single API call. The daysRemaining field enables proactive alerting before certificates expire.

Use Cases

Parameters

Response Fields

Code Examples

curl "https://api.edgedns.dev/v1/domain/cert-chain" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d "domain=example.com"

const response = await fetch(
  'https://api.edgedns.dev/v1/domain/cert-chain?domain=example.com',
  {
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://api.edgedns.dev/v1/domain/cert-chain',
    headers={'Authorization': 'Bearer YOUR_API_KEY'},
    params={
    'domain': 'example.com'
    }
)

data = response.json()
print(data)

Related Endpoints

External References

Learn more about the standards and protocols behind this endpoint.