orrery/cert-expiry

TLS certificate expiry metadata for named allowlisted hosts.

/resolve?name=orrery/cert-expiry

Use this when

You need notAfter / SANs for an allowlisted HTTPS host
You are assembling expiry evidence before a renew decision

Not for

Hosts outside the allowlist
Certificate issuance
Private PKI endpoints

Inputs / Outputs

Inputs

Name	Type	Notes
`host`	string	allowlisted HTTPS host

Outputs

Name	Type	Notes
`not_after`	string	—
`subject`	string	—
`envelope`	signed-envelope	—

Example

{
  "method": "tools/call",
  "params": {
    "name": "inspect",
    "arguments": {
      "host": "orrery-public"
    }
  }
}

Tools

inspect Inspect TLS certificate expiry for a named allowlisted HTTPS host · schema

{
  "type": "object",
  "properties": {
    "host": {
      "type": "string",
      "enum": [
        "orrery-public",
        "python-docs"
      ],
      "default": "orrery-public"
    }
  }
}

In constellations

No constellation references this Star yet.