SSL Certificate Lookup

SSL certificates serve as digital credentials that validate the identity of a website or server, facilitating secure encrypted communication through HTTPS. These certificates, issued by trusted Certificate Authorities (CAs), play a crucial role in establishing trust between clients and servers. They are essential for enabling secure data transmission and encrypting user and site data during transit.

The primary use case of SSL certificates is to ensure the security of online interactions. Without a valid SSL certificate, a website cannot utilize the HTTPS protocol, leaving data vulnerable to interception. Additionally, SSL certificates offer Open Source Intelligence (OSINT) data, revealing information such as the issuing authority, domain name, validity period, and sometimes organizational details. This information proves valuable for verifying a website's authenticity, understanding its security configuration, and even discovering associated subdomains or other services.

Use cases

  1. Secure Online Transactions: SSL certificates are crucial for e-commerce websites that handle sensitive information such as credit card details. They ensure that transactions conducted on the website are secure, protecting customers from potential fraud or data theft.

  2. Trust Building: SSL certificates display visual indicators, such as a padlock icon in the browser's address bar, signifying a secure connection. This helps build trust among visitors, assuring them that their data is transmitted safely, which is particularly important for online businesses and financial institutions.

  3. Search Engine Ranking: Search engines like Google give preference to websites using HTTPS in their ranking algorithms. Having a valid SSL certificate not only enhances security but also contributes to better search engine visibility, potentially improving a website's online presence.

Query

curl --location --request GET 'https://huntapi.com/api/v1/website/check?include_features=["ssl"]' \
--header 'Content-Type: application/json' \
--header 'x-api-key: <token>'
curl --location --request GET 'https://huntapi.com/api/v1/website/check?include_features=["ssl"]' \
--header 'Content-Type: application/json' \
--header 'x-api-key: <token>'

Response

{
    "ssl": {
        "bits": 2048,
        "issuer": {
            "c": "US",
            "o": "DigiCert Inc",
            "cn": "Thawte RSA CA 2018",
            "ou": "www.digicert.com"
        },
        "pubkey": {
            "data": [xxx],
            "type": "Buffer"
        },
        "modulus": "xxx",
        "subject": {
            "cn": "xxx.com"
        },
        "exponent": "0x10001",
        "valid_to": "Apr 21 23:59:59 2024 GMT",
        "valid_from": "Mar 22 00:00:00 2023 GMT",
        "fingerprint": "CE:08:D9:92:D9:B7:7B:FD:36:9F:xxx",
        "info_access": {
            "ocsp - _uri": [
                "http://status.thawte.com"
            ],
            "ca _issuers - _uri": [
                "http://cacerts.thawte.com/ThawteRSACA2018.crt"
            ]
        },
        "ext_key_usage": [
            "1.3.6.1.5.5.7.x.x",
            "1.3.6.1.5.5.7.x.x"
        ],
        "serial_number": "xxx",
        "fingerprint256": "xxx",
        "fingerprint512": "xxx",
        "subjectaltname": "DNS:xxxx.com, DNS:www.xxx.xxx.com, DNS:*.api.dev.xxxx.com, DNS:*.api.xxxx.com, xxx"
    }
}
{
    "ssl": {
        "bits": 2048,
        "issuer": {
            "c": "US",
            "o": "DigiCert Inc",
            "cn": "Thawte RSA CA 2018",
            "ou": "www.digicert.com"
        },
        "pubkey": {
            "data": [xxx],
            "type": "Buffer"
        },
        "modulus": "xxx",
        "subject": {
            "cn": "xxx.com"
        },
        "exponent": "0x10001",
        "valid_to": "Apr 21 23:59:59 2024 GMT",
        "valid_from": "Mar 22 00:00:00 2023 GMT",
        "fingerprint": "CE:08:D9:92:D9:B7:7B:FD:36:9F:xxx",
        "info_access": {
            "ocsp - _uri": [
                "http://status.thawte.com"
            ],
            "ca _issuers - _uri": [
                "http://cacerts.thawte.com/ThawteRSACA2018.crt"
            ]
        },
        "ext_key_usage": [
            "1.3.6.1.5.5.7.x.x",
            "1.3.6.1.5.5.7.x.x"
        ],
        "serial_number": "xxx",
        "fingerprint256": "xxx",
        "fingerprint512": "xxx",
        "subjectaltname": "DNS:xxxx.com, DNS:www.xxx.xxx.com, DNS:*.api.dev.xxxx.com, DNS:*.api.xxxx.com, xxx"
    }
}