SSL Certificate Examples · Example 1 of 4 in Certificate Problems

An Expired Certificate

GEThttps://api.deepinfo.com/v1/lookup/ssl

An expired certificate: has_expired is true and invalid_reason says "certificate has expired" (it ended in April 2015).

Param: target
Value: expired.badssl.com

Asks for the certificate of expired.badssl.com.

The connection succeeds, but the certificate was valid only from April 9 to April 12, 2015: has_expired is true, signature.valid is false and invalid_reason is certificate has expired. The issuer is a COMODO RSA domain-validation CA.

Request

curl

curl 'https://api.deepinfo.com/v1/lookup/ssl?target=expired.badssl.com' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/lookup/ssl"

params = {
    "target": "expired.badssl.com"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, params=params, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/lookup/ssl?target=expired.badssl.com";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/lookup/ssl?target=expired.badssl.com", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/lookup/ssl?target=expired.badssl.com"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/lookup/ssl?target=expired.badssl.com");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/lookup/ssl?target=expired.badssl.com',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/lookup/ssl?target=expired.badssl.com')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "target": "expired.badssl.com",
  "port": 443,
  "check_date": "2026-09-24T07:51:57Z",
  "connection_status": "success",
  "parsed": {
    "version": {
      "name": "v3",
      "value": "2"
    },
    "fingerprint_sha1": "404bbd2f1f4cc2fdeef13aabdd523ef61f1c71f3",
    "fingerprint_sha256": "ba105ce02bac76888ecee47cd4eb7941653e9ac993b61b2eb3dcc82014d21b4f",
    "fingerprint_md5": "67344e61c0431cf1f7257c1d6de7a785",
    "subject": {
      "dn": "CN=*.badssl.com,OU=PositiveSSL Wildcard,OU=Domain Control Validated",
      "common_name": "*.badssl.com",
      "country_name": null,
      "locality": null,
      "organization": null,
      "organizational_unit": "Domain Control Validated",
      "state": null
    },
    "signature": {
      "value": "anrx2v8DB3J4xWahT0ZDDl8UIYx1Gus24B+kEBXs2jMlfDu1CscBOD0n/VjZzOotaTl8vpfvC9YLWOeMf7+zTB3zt5CApjZ8FFvsBy0CPhtbY1sVqwD6HzsZLd/iIxARB35yf+K/twAbmC8sP86FmieMECIIQSuKPoJO/N0hxlZ0cKQ08rFAnitYolkPHUjv6xE+wUqevGVVbcaj79XUls3xrif3pFcUPJRBBXqLoTdH1/V93PrObzGisIzqzBKbIvE0cM99dUqLaCkMHumWqM+wEh9cKu5nL3+9c/NaASIMcPrNRe94XM4N+k7h785ln0cMT7s2RGhWXFZZraqKvA==",
      "self_signed": false,
      "valid": false,
      "valid_chain": true,
      "invalid_reason": "certificate has expired",
      "signature_algorithm": {
        "oid": "1.2.840.113549.1.1.11",
        "name": "sha256"
      }
    },
    "validity": {
      "start": "2015-04-09T00:00:00Z",
      "length": 345599,
      "end": "2015-04-12T23:59:59Z"
    },
    "issuer": {
      "dn": "CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB",
      "common_name": "COMODO RSA Domain Validation Secure Server CA",
      "country_name": "GB",
      "locality": "Salford",
      "organization": "COMODO CA Limited",
      "organizational_unit": null,
      "state": "Greater Manchester"
    },
    "extensions": {
      "key_usage": {
        "digital_signature": true,
        "content_commitment": false,
        "key_agreement": false,
        "data_encipherment": false,
        "key_encipherment": true,
        "key_cert_sign": false,
        "crl_sign": false
      },
      "extended_key_usage": {
        "server_auth": true,
        "client_auth": true
      },
      "basic_constraints": {
        "is_ca": false
      },
      "subject_key_identifier": {
        "digest": "ne7Be4ELOkdpcRh9ETeTvKUbP/s="
      },
      "authority_key_identifier": {
        "key_identifier": "kK9qOpRaC9iQ6hJWc99DtDoo2uc="
      },
      "authority_info_access": {
        "caissuers_urls": "http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt",
        "ocsp_urls": "http://ocsp.comodoca.com"
      },
      "subject_alt_name": {
        "dns_names": [
          "*.badssl.com",
          "badssl.com"
        ]
      },
      "certificate_policies": [
        "1.3.6.1.4.1.6449.1.2.2.7",
        "2.23.140.1.2.1"
      ],
      "crl_distribution_points": [
        "http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl"
      ],
      "signed_certificate_timestamp": [],
      "other_extensions": []
    },
    "serial_number": "99565320202650452861752791156765321481",
    "tbs_fingerprint": "0eb43cbc55fdbdf45e51047d51802c40fe78e4003de50dfdda93a70c4ae57bb8",
    "subject_key_info": {
      "fingerprint": {
        "hash_algorithm_name": "sha256",
        "value": "ba105ce02bac76888ecee47cd4eb7941653e9ac993b61b2eb3dcc82014d21b4f"
      },
      "key_algorithm": {
        "name": "RSA"
      },
      "rsa_public_key": {
        "length": "2048",
        "modulus": "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",
        "exponent": "65537"
      }
    },
    "has_expired": true,
    "fqdn_list": [
      "badssl.com"
    ]
  },
  "certificate": "MIIFSzCCBDOgAwIBAgIQSueVSfqavj8QDxekeOFpCTANBgkqhkiG9w0BAQsFADCBkDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNVBAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQTAeFw0xNTA0MDkwMDAwMDBaFw0xNTA0MTIyMzU5NTlaMFkxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEdMBsGA1UECxMUUG9zaXRpdmVTU0wgV2lsZGNhcmQxFTATBgNVBAMUDCouYmFkc3NsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMIE7PiM7gTCs9hQ1XBYzJMY61yoaEmwIrX5lZ6xKyx2PmzAS2BMTOqytMAPgLaw+XLJhgL5XEFdEyt/ccRLvOmULlA3pmccYYz2QULFRtMWhyefdOsKnRFSJiFzbIRMeVXk0WvoBj1IFVKtsyjbqv9u/2CVSndrOfEk0TG23U3AxPxTuW1CrbV8/q71FdIzSOciccfCFHpsKOo3St/qbLVytH5aohbcabFXRNsKEqveww9HdFxBIuGa+RuT5q0iBikusbpJHAwnnqP7i/dAcgCskgjZjFeEU4EFy+b+a1SYQCeFxxC7c3DvaRhBB0VVfPlkPz0sw6l865MaTIbRyoUCAwEAAaOCAdUwggHRMB8GA1UdIwQYMBaAFJCvajqUWgvYkOoSVnPfQ7Q6KNrnMB0GA1UdDgQWBBSd7sF7gQs6R2lxGH0RN5O8pRs/+zAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTwYDVR0gBEgwRjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgEwVAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBhQYIKwYBBQUHAQEEeTB3ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wIwYDVR0RBBwwGoIMKi5iYWRzc2wuY29tggpiYWRzc2wuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQBqevHa/wMHcnjFZqFPRkMOXxQhjHUa6zbgH6QQFezaMyV8O7UKxwE4PSf9WNnM6i1pOXy+l+8L1gtY54x/v7NMHfO3kICmNnwUW+wHLQI+G1tjWxWrAPofOxkt3+IjEBEHfnJ/4r+3ABuYLyw/zoWaJ4wQIghBK4o+gk783SHGVnRwpDTysUCeK1iiWQ8dSO/rET7BSp68ZVVtxqPv1dSWzfGuJ/ekVxQ8lEEFeouhN0fX9X3c+s5vMaKwjOrMEpsi8TRwz311SotoKQwe6Zaoz7ASH1wq7mcvf71z81oBIgxw+s1F73hczg36TuHvzmWfRwxPuzZEaFZcVlmtqoq8",
  "parse_errors": []
}

Content-Type: application/json
ratelimit-limit: 100
ratelimit-remaining: 95
ratelimit-reset: 4
x-ratelimit-limit-minute: 100
x-ratelimit-remaining-minute: 95
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

What this example sends. Every parameter is documented on SSL; the exact request is in the code panel.

Parameter	Value
`target`query	`expired.badssl.com`

Reference updated September 24, 2026

Request

Related Examples