Overview

TLSCheck API (dev)

Fetch TLS certificate details for a host.

Rate Limiting

• Default: 30 requests per 60 seconds per IP address
• Returns 429 status when exceeded
• Headers: Retry-After, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset

Caching

• Results are cached in-memory for 30 minutes (configurable via CACHE_TTL_MS)
• Cache key includes revocation check flag

CORS

• Enabled for all origins with GET, POST, OPTIONS methods

Revocation Checks

• Can be enabled per-request via revocationCheck: true
• Checks OCSP first, falls back to CRL if needed
• Configurable via REVOCATION_MODE (ocsp, crl, or off)

• OpenAPI version: 3.0.3