Fetch TLS certificate details for a host.
Rate Limiting
- Default: 30 requests per 60 seconds per IP address
- Returns 429 status when exceeded
- Headers:
Retry-After, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset
Caching
- Results are cached in-memory for 30 minutes (configurable via
CACHE_TTL_MS)
- Cache key includes revocation check flag
CORS
- Enabled for all origins with GET, POST, OPTIONS methods
Revocation Checks
- Can be enabled per-request via
revocationCheck: true
- Checks OCSP first, falls back to CRL if needed
- Configurable via
REVOCATION_MODE (ocsp, crl, or off)