{"slug":"sicher-halowerk-com-v1-oss-openssl-x509-purpose-evaluate-849e6e","title":"Reads the constraints inside a single certificate — basic constraints, key usage","host":"sicher.halowerk.com","method":"POST","resource":"https://sicher.halowerk.com/v1/oss-openssl-x509-purpose-evaluate","category":"other","description":"Reads the constraints inside a single certificate — basic constraints, key usage, extended key usage — and reports, per role, whether the certificate permits being used that way under the pinned OpenSSL build's rules. Roles covered are TLS client, TLS server, S/MIME signing and encryption, and times","price_listed":0.001,"price_asked":0.001,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":1221,"reported_calls_30d":2,"reported_payers_30d":2,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"certificate_pem":"-----BEGIN CERTIFICATE-----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\nDmVCA6ajI2xERBn+\n-----END CERTIFICATE-----\n"},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"additionalProperties":false,"properties":{"certificate_pem":{"maxLength":262144,"minLength":1,"type":"string"}},"required":["certificate_pem"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-24","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.001,"price_match":true,"latency_ms":1221,"error":null}],"description_full":"Reads the constraints inside a single certificate — basic constraints, key usage, extended key usage — and reports, per role, whether the certificate permits being used that way under the pinned OpenSSL build's rules. Roles covered are TLS client, TLS server, S/MIME signing and encryption, and timestamp signing. This answers the frequent confusion where a certificate is deployed for a purpose its own extensions forbid, and the failure only shows up as an opaque handshake error later.","last_updated":"2026-10-23T07:50:20.173Z","schemes":["exact"]}