SSL Certificate Examples · Example 4 of 4 in Valid Certificates

An Elliptic Curve (ECDSA) Key

GEThttps://api.deepinfo.com/v1/lookup/ssl

The certificate of ecc256.badssl.com: an ECDSA P-256 key, shown in subject_key_info.

Param: target
Value: ecc256.badssl.com

Asks for the certificate of ecc256.badssl.com, which serves an elliptic-curve key.

parsed.subject_key_info.key_algorithm.name is ECDSA and ecdsa_public_key.length is 256. The certificate itself is a valid Let's Encrypt certificate for *.badssl.com and badssl.com, signed with sha384. Compare the RSA 2048-bit keys of the badssl.com problem certificates.

Request

curl

curl 'https://api.deepinfo.com/v1/lookup/ssl?target=ecc256.badssl.com' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/lookup/ssl"

params = {
    "target": "ecc256.badssl.com"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, params=params, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/lookup/ssl?target=ecc256.badssl.com";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/lookup/ssl?target=ecc256.badssl.com", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/lookup/ssl?target=ecc256.badssl.com"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/lookup/ssl?target=ecc256.badssl.com");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/lookup/ssl?target=ecc256.badssl.com',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/lookup/ssl?target=ecc256.badssl.com')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "target": "ecc256.badssl.com",
  "port": 443,
  "check_date": "2026-09-24T07:51:56Z",
  "connection_status": "success",
  "parsed": {
    "version": {
      "name": "v3",
      "value": "2"
    },
    "fingerprint_sha1": "3960e4fe417de0b0565848c8c6364583594ddfd4",
    "fingerprint_sha256": "14e6080b43ceb3acbc42a1a02c53b017fcb1d6fd6a610c53c3f3fe6dfdf89743",
    "fingerprint_md5": "62d8716f30ba3d3156fd338ab870a51b",
    "subject": {
      "dn": "CN=*.badssl.com",
      "common_name": "*.badssl.com",
      "country_name": null,
      "locality": null,
      "organization": null,
      "organizational_unit": null,
      "state": null
    },
    "signature": {
      "value": "MGYCMQDKTk6eZP4YDH8HFsN0k0Q6oFfrSL7EkWRK81TDn6l4UUNPR3/Wbj1bRHkiNPo6csQCMQCcrrhdj2nONakj1nclrXNkRyJGInFn+zPxaRT0qTU2jOvbZKrUU5F71nQu6PXSW3A=",
      "self_signed": false,
      "valid": true,
      "valid_chain": true,
      "invalid_reason": null,
      "signature_algorithm": {
        "oid": "1.2.840.10045.4.3.3",
        "name": "sha384"
      }
    },
    "validity": {
      "start": "2026-07-28T20:02:52Z",
      "length": 7775999,
      "end": "2026-10-26T20:02:51Z"
    },
    "issuer": {
      "dn": "CN=YE1,O=Let's Encrypt,C=US",
      "common_name": "YE1",
      "country_name": "US",
      "locality": null,
      "organization": "Let's Encrypt",
      "organizational_unit": null,
      "state": null
    },
    "extensions": {
      "key_usage": {
        "digital_signature": true,
        "content_commitment": false,
        "key_agreement": false,
        "data_encipherment": false,
        "key_encipherment": false,
        "key_cert_sign": false,
        "crl_sign": false
      },
      "extended_key_usage": {
        "server_auth": true
      },
      "basic_constraints": {
        "is_ca": false
      },
      "subject_key_identifier": {
        "digest": "3kLeMFyadrKLQdFjSYziKSiyKPs="
      },
      "authority_key_identifier": {
        "key_identifier": "uyDKRwv+1+Wc+Y8JKqOMN0WxvNg="
      },
      "authority_info_access": {
        "caissuers_urls": "http://ye1.i.lencr.org/"
      },
      "subject_alt_name": {
        "dns_names": [
          "*.badssl.com",
          "badssl.com"
        ]
      },
      "certificate_policies": [
        "2.23.140.1.2.1"
      ],
      "crl_distribution_points": [
        "http://ye1.c.lencr.org/36.crl"
      ],
      "signed_certificate_timestamp": [
        {
          "log_id": "yKPEf8ezrbk1awE/anoSbeM6TkOlxkb5l605dZkdz5o=",
          "timestamp": 1785272482,
          "version": 0,
          "signature": "MEUCIGXNa1E8XDAs2f477f7eK+rcUfzo5t52nFT2trvYMP/aAiEArx+iZgBYb0XIUqAXVKUn26/zrqi2s7a/xjuYe6Bnleg="
        },
        {
          "log_id": "bP5QGUOoXqkWvFLRM+TcyR7xQRx9JYQg0XOAnhgY6zo=",
          "timestamp": 1785272482,
          "version": 0,
          "signature": "MEUCIE6TNntnQMZXV43dhUJ/Tte+kefV/6vCYCcTRnpaVzbAAiEApOR7ZAztYVnoQPW1rB9lo2d45LKz4JFW4Co8Ag4Xm1Q="
        }
      ],
      "other_extensions": []
    },
    "serial_number": "538860453420351530069832929302921248548771",
    "tbs_fingerprint": "6c24fe6ff71356dc8f7c6b1335da3db850d63ab209b0bcd7fdd85698a957277c",
    "subject_key_info": {
      "fingerprint": {
        "hash_algorithm_name": "sha384",
        "value": "50c02b42e1810e19fe1502d5559bcdd86f87c724db33fad5582bc6d726729ee4246563ae654e154b6d3de9f9f89d774a"
      },
      "key_algorithm": {
        "name": "ECDSA"
      },
      "ecdsa_public_key": {
        "length": "256",
        "x": "73039427551890726804792398547645622380882546439293940039712744765595942078199",
        "y": "78017764111284068192654178408294882466802146314080124716162707910654176212319"
      }
    },
    "has_expired": false,
    "fqdn_list": [
      "badssl.com"
    ]
  },
  "certificate": "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",
  "parse_errors": []
}

Content-Type: application/json
ratelimit-limit: 100
ratelimit-remaining: 96
ratelimit-reset: 5
x-ratelimit-limit-minute: 100
x-ratelimit-remaining-minute: 96
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

What this example sends. Every parameter is documented on SSL; the exact request is in the code panel.

Parameter	Value
`target`query	`ecc256.badssl.com`

Reference updated September 24, 2026

Request

Related Examples