All APIs Syndaq TLS Check

Security API

Inspect TLS certificates before you trust the host.

Look up issuer, subject, validity windows, SANs, protocol, and fingerprint for any hostname. The Syndaq TLS Check API returns structured JSON—ready for monitoring, onboarding, and security reviews.

At a glance

  • 3 REST endpoints
  • JSON Request & response
  • HTTPS TLS required
  • Free tier available Starting price

Use cases

Where teams use Syndaq TLS Check

Customer onboarding

Confirm a client domain presents a valid certificate before you send traffic to it.

Expiry monitoring

Alert when days_remaining drops below your operational threshold.

Security reviews

Capture issuer and SAN inventory during brand or partner diligence.

Hosting panels

Surface certificate health for hosted domains without leaving your stack.

Integration

Up and running in three steps

1

Get an API key

Subscribe to a TLS Check plan and copy your tl_sec_ secret key from the client area.

2

Pass a hostname

Call /v1/tls/lookup/{host} or ?host= (optional port; default 443).

3

Act on validity

Use valid, days_remaining, issuer, and SAN fields in your checks.

Example

Copy, paste, ship

Every response includes a request_id for support correlation. Rate limit and quota headers are returned on authenticated routes so you can backoff gracefully.

Authenticated with your Syndaq secret key over HTTPS. Returns certificate metadata for the hostname—not a full TLS posture audit or vulnerability scan.

Request
curl -s "https://api.syndaq.com/v1/tls/lookup/example.com" \
  -H "Authorization: Bearer tl_sec_YOUR_SECRET_KEY"
Response
{
  "success": true,
  "host": "example.com",
  "port": 443,
  "cached": true,
  "valid": true,
  "issuer": "DigiCert Inc",
  "subject": "example.com",
  "not_before": "2025-01-15T00:00:00Z",
  "not_after": "2026-02-15T23:59:59Z",
  "days_remaining": 215,
  "san": ["example.com", "www.example.com"],
  "protocol": "TLSv1.3",
  "fingerprint_sha256": "a1b2c3d4e5f678901234567890abcdef1234567890abcdef1234567890abcdef",
  "request_id": "a2b3c4d5e6f7890123456789012345bc"
}

Reference

API endpoints

Included with your Syndaq TLS Check plan.

Method Path Description
GET /v1/tls/lookup Check TLS certificate metadata by ?host= query parameter.
GET /v1/tls/lookup/{host} Check TLS certificate metadata for a host in the URL path.
GET /v1/tls/status Returns plan limits and quota for the authenticated key.

Pricing

Plans for every stage

Transparent limits. Upgrade when your traffic grows—no surprise overages without a plan change.

Starter

Free

Development and light production lookups.

  • 120 requests / minute
  • 10,000 lookups / month
  • Secret key authentication
  • TLS certificate JSON REST API
  • Validity, issuer, expiry & SANs
  • Rate limit & quota headers
Get started

Enterprise

monthly
$99.00 USD

High-volume lookups with priority limits.

  • 3,000 requests / minute
  • Unlimited monthly lookups
  • Secret key authentication
  • TLS certificate JSON REST API
  • Validity, issuer, expiry & SANs
  • Rate limit & quota headers
Get started

FAQ

Common questions

Send your tl_sec_ secret key as a Bearer token in the Authorization header on every request to https://api.syndaq.com.

valid, issuer, subject, not_before/not_after, days_remaining, SAN list, protocol, and fingerprint_sha256—plus host and port.

Yes. Wire validity and expiry into monitoring or onboarding workflows within your plan's rate limits and monthly quotas.

Ready to integrate Syndaq TLS Check?

Pick a plan, create your keys in the client area, and start calling the API in minutes.

Choose a plan Ask a question