{
  "openapi": "3.0.3",
  "info": {
    "title": "B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor",
    "version": "3.0.0",
    "description": "Discovers exposed corporate subdomains and SSL/TLS certificates via public Certificate Transparency (CT) logs. Flags wildcard certificates, shadow IT staging/dev endpoints, expiring certs, and computes an Attack Surface Risk Score (0-100).\n\n### Enterprise B2B Value Proposition (B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor)\n- **Target B2B Buyers:** External Attack Surface Management (EASM) Platforms, Penetration Testers, Bug Bounty Automation, and SOCs.\n- **Zero External API Keys Required:** Connects directly to authoritative government, regulatory, and financial primary registries with built-in retry/backoff and deterministic schema normalization.\n- **Quantitative Scoring & RAG Briefs:** Every record is enriched with a quantitative 0-100 risk/viability score and an LLM-ready Markdown executive brief (`B2B SSL/TLS CT Log Subdomain & Attack Surface Audited`).\n- **Backend Proxy Secret Injection:** RapidAPI Studio and Zyla API Hub inject `Authorization: Bearer <APIFY_API_TOKEN>` invisibly at the proxy layer when forwarding synchronous calls to `https://api.apify.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items`.\n- **Marketplace Categories:** RapidAPI `Cybersecurity` | Zyla API Hub `Security`.\n- **Subscription Tiers (USD):** `BASIC` ($0.00/mo, 15 req/mo hard cap), `PRO` ($19.00/mo, 1,000 req/mo + $0.02/extra), `ULTRA` ($49.00/mo, 5,000 req/mo + $0.015/extra), `MEGA` ($149.00/mo, 25,000 req/mo + $0.010/extra).\n- **SEO Keywords:** certificate-transparency, subdomain-discovery, attack-surface-management, easm-recon, shadow-it-audit, ssl-tls-monitor, secops-api.",
    "termsOfService": "https://jesleytassili-glitch.github.io/b2b-quant-mcp-n8n-suite/",
    "contact": {
      "name": "B2B Quant APIs (@b2b-quant-apis)",
      "email": "jesleytassili@gmail.com",
      "url": "https://apify.com/b2b-quant-apis/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor"
    },
    "license": {
      "name": "Commercial B2B API Subscription (RapidAPI & Zyla Hub)",
      "url": "https://apify.com/b2b-quant-apis/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor"
    },
    "x-category": "Cybersecurity",
    "x-rapidapi-category": "Cybersecurity",
    "x-zyla-category": "Security",
    "x-seo-tags": [
      "certificate-transparency",
      "subdomain-discovery",
      "attack-surface-management",
      "easm-recon",
      "shadow-it-audit",
      "ssl-tls-monitor",
      "secops-api"
    ],
    "x-payout-destination": "Wise #890361113",
    "x-pricing-plans": {
      "BASIC": {
        "tier": "BASIC",
        "label": "Freemium Developer Trial",
        "monthlyPriceUsd": 0.0,
        "monthlyQuotaRequests": 15,
        "overagePricePerRequestUsd": 0.0,
        "hardLimit": true
      },
      "PRO": {
        "tier": "PRO",
        "label": "Startup & RevOps Pipeline",
        "monthlyPriceUsd": 19.0,
        "monthlyQuotaRequests": 1000,
        "overagePricePerRequestUsd": 0.02,
        "hardLimit": false
      },
      "ULTRA": {
        "tier": "ULTRA",
        "label": "Mid-Market Automation Cluster",
        "monthlyPriceUsd": 49.0,
        "monthlyQuotaRequests": 5000,
        "overagePricePerRequestUsd": 0.015,
        "hardLimit": false
      },
      "MEGA": {
        "tier": "MEGA",
        "label": "Enterprise High-Throughput SLA",
        "monthlyPriceUsd": 149.0,
        "monthlyQuotaRequests": 25000,
        "overagePricePerRequestUsd": 0.01,
        "hardLimit": false
      }
    },
    "x-code-snippets": {
      "cURL": "# Primary Synchronous Endpoint: https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\ncurl --request POST \\\n  --url \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\" \\\n  --header \"Content-Type: application/json\" \\\n  --header \"X-RapidAPI-Host: b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\" \\\n  --header \"X-RapidAPI-Key: <YOUR_RAPIDAPI_OR_ZYLA_KEY>\" \\\n  --data '{\"rootDomain\": \"cloudflare.com\", \"excludeExpired\": true, \"maxResults\": 10}'",
      "Python": "import httpx\n\n# Primary Synchronous Endpoint (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\nurl = \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\"\npayload = {\n    \"rootDomain\": \"cloudflare.com\",\n    \"excludeExpired\": true,\n    \"maxResults\": 10\n}\nheaders = {\n    \"Content-Type\": \"application/json\",\n    \"X-RapidAPI-Host\": \"b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\",\n    \"X-RapidAPI-Key\": \"<YOUR_RAPIDAPI_OR_ZYLA_KEY>\",\n}\n\nwith httpx.Client(timeout=30.0) as client:\n    response = client.post(url, json=payload, headers=headers)\n    response.raise_for_status()\n    print(response.json())\n",
      "Node.js": "// Primary Synchronous Endpoint (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\nconst url = \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\";\nconst options = {\n  method: \"POST\",\n  headers: {\n    \"Content-Type\": \"application/json\",\n    \"X-RapidAPI-Host\": \"b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\",\n    \"X-RapidAPI-Key\": \"<YOUR_RAPIDAPI_OR_ZYLA_KEY>\"\n  },\n  body: JSON.stringify({\"rootDomain\": \"cloudflare.com\", \"excludeExpired\": true, \"maxResults\": 10})\n};\n\nconst response = await fetch(url, options);\nconst data = await response.json();\nconsole.log(data);\n"
    },
    "x-primary-backend-url": "https://api.apify.com",
    "x-primary-backend-base-url": "https://api.apify.com",
    "x-apify-sync-endpoint": "https://api.apify.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items",
    "x-apify-health-endpoint": "https://api.apify.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
    "x-backend-secret-header": {
      "name": "Authorization",
      "valueTemplate": "Bearer <APIFY_API_TOKEN>",
      "headerName": "Authorization",
      "headerValueTemplate": "Bearer <APIFY_API_TOKEN>",
      "injectedByProxy": true,
      "hiddenFromSubscriber": true,
      "description": "Secret Header injected invisibly by RapidAPI Studio and Zyla API Hub proxy when calling https://api.apify.com."
    },
    "x-openapi-spec-url": "https://jesleytassili-glitch.github.io/specs_openapi_31/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.json",
    "x-openapi-suite-spec-url": "https://jesleytassili-glitch.github.io/b2b-quant-mcp-n8n-suite/specs_openapi_31/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.json",
    "x-apis-json-url": "https://jesleytassili-glitch.github.io/apis.json",
    "x-github-release-tag": "v2.2.0"
  },
  "externalDocs": {
    "description": "Official B2B Documentation & Schema Reference for B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor",
    "url": "https://jesleytassili-glitch.github.io/b2b-quant-mcp-n8n-suite/actors/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.html"
  },
  "servers": [
    {
      "url": "https://api.apify.com",
      "description": "Primary Apify Cloud Synchronous Execution Cluster (Real HTTP 200/201 POST & GET)"
    },
    {
      "url": "https://api.apify.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items",
      "description": "Direct Apify Actor Synchronous Execution Endpoint (b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)"
    },
    {
      "url": "https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev",
      "description": "Anti-Bypass Stateless B2B Gateway (RapidAPI & Zyla Hub Proxy)"
    }
  ],
  "tags": [
    {
      "name": "Cybersecurity",
      "description": "RapidAPI Hub primary category: Cybersecurity (Zyla Hub: Security)"
    },
    {
      "name": "certificate-transparency",
      "description": "B2B SEO Search Tag: certificate-transparency"
    },
    {
      "name": "subdomain-discovery",
      "description": "B2B SEO Search Tag: subdomain-discovery"
    },
    {
      "name": "attack-surface-management",
      "description": "B2B SEO Search Tag: attack-surface-management"
    },
    {
      "name": "easm-recon",
      "description": "B2B SEO Search Tag: easm-recon"
    },
    {
      "name": "shadow-it-audit",
      "description": "B2B SEO Search Tag: shadow-it-audit"
    },
    {
      "name": "ssl-tls-monitor",
      "description": "B2B SEO Search Tag: ssl-tls-monitor"
    },
    {
      "name": "secops-api",
      "description": "B2B SEO Search Tag: secops-api"
    }
  ],
  "security": [
    {
      "ApifyCloudBearerAuth": []
    },
    {
      "RapidAPIProxySecret": []
    },
    {
      "ZylaProxySecret": []
    },
    {
      "RapidAPISubscriberKey": []
    }
  ],
  "paths": {
    "/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items": {
      "post": {
        "operationId": "run_sync_b2b_ssl_tls_ct_log_subdomain_attack_surface_auditor",
        "summary": "Execute B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor (Apify Cloud Synchronous POST)",
        "description": "Synchronous stateless execution of **B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor**. RapidAPI Studio and Zyla API Hub inject the backend secret header `Authorization: Bearer <APIFY_API_TOKEN>` invisibly to the end user, validate `X-RapidAPI-Proxy-Secret` / `X-Zyla-Proxy-Secret` in constant time (`hmac.compare_digest`), inject quota headers (`X-RateLimit-Remaining`, `X-Engine-Version`), and return deterministic JSON records.",
        "tags": [
          "Cybersecurity",
          "certificate-transparency",
          "subdomain-discovery",
          "attack-surface-management",
          "easm-recon",
          "shadow-it-audit"
        ],
        "x-codeSamples": [
          {
            "lang": "cURL",
            "label": "cURL",
            "source": "# Primary Synchronous Endpoint: https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\ncurl --request POST \\\n  --url \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\" \\\n  --header \"Content-Type: application/json\" \\\n  --header \"X-RapidAPI-Host: b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\" \\\n  --header \"X-RapidAPI-Key: <YOUR_RAPIDAPI_OR_ZYLA_KEY>\" \\\n  --data '{\"rootDomain\": \"cloudflare.com\", \"excludeExpired\": true, \"maxResults\": 10}'"
          },
          {
            "lang": "Python",
            "label": "Python (httpx)",
            "source": "import httpx\n\n# Primary Synchronous Endpoint (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\nurl = \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\"\npayload = {\n    \"rootDomain\": \"cloudflare.com\",\n    \"excludeExpired\": true,\n    \"maxResults\": 10\n}\nheaders = {\n    \"Content-Type\": \"application/json\",\n    \"X-RapidAPI-Host\": \"b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\",\n    \"X-RapidAPI-Key\": \"<YOUR_RAPIDAPI_OR_ZYLA_KEY>\",\n}\n\nwith httpx.Client(timeout=30.0) as client:\n    response = client.post(url, json=payload, headers=headers)\n    response.raise_for_status()\n    print(response.json())\n"
          },
          {
            "lang": "Node.js",
            "label": "Node.js (fetch)",
            "source": "// Primary Synchronous Endpoint (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\nconst url = \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\";\nconst options = {\n  method: \"POST\",\n  headers: {\n    \"Content-Type\": \"application/json\",\n    \"X-RapidAPI-Host\": \"b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\",\n    \"X-RapidAPI-Key\": \"<YOUR_RAPIDAPI_OR_ZYLA_KEY>\"\n  },\n  body: JSON.stringify({\"rootDomain\": \"cloudflare.com\", \"excludeExpired\": true, \"maxResults\": 10})\n};\n\nconst response = await fetch(url, options);\nconst data = await response.json();\nconsole.log(data);\n"
          }
        ],
        "x-snippets": {
          "cURL": "# Primary Synchronous Endpoint: https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\ncurl --request POST \\\n  --url \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\" \\\n  --header \"Content-Type: application/json\" \\\n  --header \"X-RapidAPI-Host: b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\" \\\n  --header \"X-RapidAPI-Key: <YOUR_RAPIDAPI_OR_ZYLA_KEY>\" \\\n  --data '{\"rootDomain\": \"cloudflare.com\", \"excludeExpired\": true, \"maxResults\": 10}'",
          "Python": "import httpx\n\n# Primary Synchronous Endpoint (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\nurl = \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\"\npayload = {\n    \"rootDomain\": \"cloudflare.com\",\n    \"excludeExpired\": true,\n    \"maxResults\": 10\n}\nheaders = {\n    \"Content-Type\": \"application/json\",\n    \"X-RapidAPI-Host\": \"b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\",\n    \"X-RapidAPI-Key\": \"<YOUR_RAPIDAPI_OR_ZYLA_KEY>\",\n}\n\nwith httpx.Client(timeout=30.0) as client:\n    response = client.post(url, json=payload, headers=headers)\n    response.raise_for_status()\n    print(response.json())\n",
          "Node.js": "// Primary Synchronous Endpoint (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\nconst url = \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\";\nconst options = {\n  method: \"POST\",\n  headers: {\n    \"Content-Type\": \"application/json\",\n    \"X-RapidAPI-Host\": \"b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\",\n    \"X-RapidAPI-Key\": \"<YOUR_RAPIDAPI_OR_ZYLA_KEY>\"\n  },\n  body: JSON.stringify({\"rootDomain\": \"cloudflare.com\", \"excludeExpired\": true, \"maxResults\": 10})\n};\n\nconst response = await fetch(url, options);\nconst data = await response.json();\nconsole.log(data);\n"
        },
        "x-backend-secret-header": {
          "name": "Authorization",
          "value": "Bearer <APIFY_API_TOKEN>",
          "visibleToSubscriber": false
        },
        "requestBody": {
          "required": true,
          "description": "Structured JSON parameters for `b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor`.",
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/B2bSslTlsCtLogSubdomainAttackSurfaceAuditorRequest"
              },
              "example": {
                "rootDomain": "cloudflare.com",
                "excludeExpired": true,
                "maxResults": 10
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Successful synchronous execution of `b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor` returning enriched B2B JSON records.",
            "headers": {
              "X-RateLimit-Remaining": {
                "description": "Remaining requests in the subscriber's monthly plan quota (BASIC=15, PRO=1000, ULTRA=5000, MEGA=25000).",
                "schema": {
                  "type": "integer",
                  "example": 999
                }
              },
              "X-Engine-Version": {
                "description": "Deterministic B2B engine release version.",
                "schema": {
                  "type": "string",
                  "example": "3.0.0"
                }
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/B2bSslTlsCtLogSubdomainAttackSurfaceAuditorResponseEnvelope"
                },
                "example": {
                  "status": "succeeded",
                  "actor": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
                  "engineVersion": "3.0.0",
                  "count": 1,
                  "data": [
                    {
                      "certificateId": "30076179807",
                      "rootDomain": "cloud.com",
                      "subdomain": "verify.cloud.com",
                      "commonName": "verify.cloud.com",
                      "issuerName": "Let's Encrypt",
                      "notBefore": "2026-10-12",
                      "notAfter": "2027-01-10",
                      "isWildcard": false,
                      "shadowItExposure": "STANDARD_PRODUCTION",
                      "attackSurfaceRiskScore": 63,
                      "markdownSecOpsBrief": "# B2B SSL/TLS CT LOG & ATTACK SURFACE RECON BRIEF: verify.cloud.com\n\n## 1. Subdomain & X.509 Certificate Identity\n- **CT Certificate ID:** `30076179807`\n- **Corporate Root Domain:** `cloud.com`\n- **Discovered Subdomain / SAN:** **`verify.cloud.com`**\n- **Common Name (CN):** `verify.cloud.com`\n- **Issuing Certificate Authority:** Let's Encrypt\n\n## 2. EASM Exposure Classification & Validity\n- **Attack Surface Risk Score:** **63/100**\n- **Exposure Classification:** **`STANDARD_PRODUCTION`**\n- **Wildcard Scope (`*.domain`):** `False`\n- **Valid From (`notBefore`):** `2026-10-12`\n- **Expires On (`notAfter`):** `2027-01-10`"
                    }
                  ]
                }
              }
            }
          },
          "201": {
            "description": "Synchronous dataset created and returned for `b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor` on Apify Cloud (`HTTP 201`).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/B2bSslTlsCtLogSubdomainAttackSurfaceAuditorResponseEnvelope"
                },
                "example": {
                  "status": "succeeded",
                  "actor": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
                  "engineVersion": "3.0.0",
                  "count": 1,
                  "data": [
                    {
                      "certificateId": "30076179807",
                      "rootDomain": "cloud.com",
                      "subdomain": "verify.cloud.com",
                      "commonName": "verify.cloud.com",
                      "issuerName": "Let's Encrypt",
                      "notBefore": "2026-10-12",
                      "notAfter": "2027-01-10",
                      "isWildcard": false,
                      "shadowItExposure": "STANDARD_PRODUCTION",
                      "attackSurfaceRiskScore": 63,
                      "markdownSecOpsBrief": "# B2B SSL/TLS CT LOG & ATTACK SURFACE RECON BRIEF: verify.cloud.com\n\n## 1. Subdomain & X.509 Certificate Identity\n- **CT Certificate ID:** `30076179807`\n- **Corporate Root Domain:** `cloud.com`\n- **Discovered Subdomain / SAN:** **`verify.cloud.com`**\n- **Common Name (CN):** `verify.cloud.com`\n- **Issuing Certificate Authority:** Let's Encrypt\n\n## 2. EASM Exposure Classification & Validity\n- **Attack Surface Risk Score:** **63/100**\n- **Exposure Classification:** **`STANDARD_PRODUCTION`**\n- **Wildcard Scope (`*.domain`):** `False`\n- **Valid From (`notBefore`):** `2026-10-12`\n- **Expires On (`notAfter`):** `2027-01-10`"
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad Request — Invalid JSON payload or schema validation error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                },
                "example": {
                  "status": "error",
                  "code": 400,
                  "message": "Invalid JSON request body."
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — Missing or invalid `X-RapidAPI-Proxy-Secret` / `X-Zyla-Proxy-Secret` header (Anti-Bypass Protection).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                },
                "example": {
                  "status": "forbidden",
                  "code": 403,
                  "message": "Direct access denied. Requests must originate from RapidAPI Hub or Zyla API Hub with a valid Proxy-Secret."
                }
              }
            }
          },
          "429": {
            "description": "Too Many Requests — Monthly plan quota exceeded (e.g., BASIC Freemium 15 req/month hard limit).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                },
                "example": {
                  "status": "quota_exceeded",
                  "code": 429,
                  "message": "Monthly request quota exceeded for BASIC plan (15 req/month hard limit). Upgrade to PRO ($19/mo), ULTRA ($49/mo), or MEGA ($149/mo)."
                }
              }
            }
          }
        }
      }
    },
    "/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor": {
      "get": {
        "operationId": "status_b2b_ssl_tls_ct_log_subdomain_attack_surface_auditor",
        "summary": "Actor Metadata & Live Connectivity Check for B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor",
        "description": "Immediate `HTTP 200` status and metadata health check for `b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor` on RapidAPI Studio and Zyla API Hub (`GET https://api.apify.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor` and `GET /v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/health`) without starting a container build or run.",
        "tags": [
          "Cybersecurity"
        ],
        "responses": {
          "200": {
            "description": "Engine online and ready (`HTTP 200 JSON`).",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "status": {
                      "type": "string",
                      "example": "ok"
                    },
                    "actor": {
                      "type": "string",
                      "example": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor"
                    },
                    "engineVersion": {
                      "type": "string",
                      "example": "3.0.0"
                    },
                    "category": {
                      "type": "string",
                      "example": "Cybersecurity"
                    },
                    "data": {
                      "type": "object",
                      "additionalProperties": true,
                      "example": {
                        "name": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
                        "username": "b2b-quant-apis",
                        "isPublic": true
                      }
                    }
                  }
                },
                "example": {
                  "status": "ok",
                  "actor": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
                  "engineVersion": "3.0.0",
                  "category": "Cybersecurity",
                  "data": {
                    "name": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
                    "username": "b2b-quant-apis",
                    "isPublic": true
                  }
                }
              }
            }
          }
        }
      }
    },
    "/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor": {
      "post": {
        "operationId": "execute_b2b_ssl_tls_ct_log_subdomain_attack_surface_auditor",
        "summary": "Execute B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor",
        "description": "Synchronous stateless execution of **B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor**. RapidAPI Studio and Zyla API Hub inject the backend secret header `Authorization: Bearer <APIFY_API_TOKEN>` invisibly to the end user, validate `X-RapidAPI-Proxy-Secret` / `X-Zyla-Proxy-Secret` in constant time (`hmac.compare_digest`), inject quota headers (`X-RateLimit-Remaining`, `X-Engine-Version`), and return deterministic JSON records.",
        "tags": [
          "Cybersecurity",
          "certificate-transparency",
          "subdomain-discovery",
          "attack-surface-management",
          "easm-recon",
          "shadow-it-audit"
        ],
        "x-codeSamples": [
          {
            "lang": "cURL",
            "label": "cURL",
            "source": "# Primary Synchronous Endpoint: https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\ncurl --request POST \\\n  --url \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\" \\\n  --header \"Content-Type: application/json\" \\\n  --header \"X-RapidAPI-Host: b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\" \\\n  --header \"X-RapidAPI-Key: <YOUR_RAPIDAPI_OR_ZYLA_KEY>\" \\\n  --data '{\"rootDomain\": \"cloudflare.com\", \"excludeExpired\": true, \"maxResults\": 10}'"
          },
          {
            "lang": "Python",
            "label": "Python (httpx)",
            "source": "import httpx\n\n# Primary Synchronous Endpoint (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\nurl = \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\"\npayload = {\n    \"rootDomain\": \"cloudflare.com\",\n    \"excludeExpired\": true,\n    \"maxResults\": 10\n}\nheaders = {\n    \"Content-Type\": \"application/json\",\n    \"X-RapidAPI-Host\": \"b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\",\n    \"X-RapidAPI-Key\": \"<YOUR_RAPIDAPI_OR_ZYLA_KEY>\",\n}\n\nwith httpx.Client(timeout=30.0) as client:\n    response = client.post(url, json=payload, headers=headers)\n    response.raise_for_status()\n    print(response.json())\n"
          },
          {
            "lang": "Node.js",
            "label": "Node.js (fetch)",
            "source": "// Primary Synchronous Endpoint (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\nconst url = \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\";\nconst options = {\n  method: \"POST\",\n  headers: {\n    \"Content-Type\": \"application/json\",\n    \"X-RapidAPI-Host\": \"b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\",\n    \"X-RapidAPI-Key\": \"<YOUR_RAPIDAPI_OR_ZYLA_KEY>\"\n  },\n  body: JSON.stringify({\"rootDomain\": \"cloudflare.com\", \"excludeExpired\": true, \"maxResults\": 10})\n};\n\nconst response = await fetch(url, options);\nconst data = await response.json();\nconsole.log(data);\n"
          }
        ],
        "x-snippets": {
          "cURL": "# Primary Synchronous Endpoint: https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\ncurl --request POST \\\n  --url \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\" \\\n  --header \"Content-Type: application/json\" \\\n  --header \"X-RapidAPI-Host: b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\" \\\n  --header \"X-RapidAPI-Key: <YOUR_RAPIDAPI_OR_ZYLA_KEY>\" \\\n  --data '{\"rootDomain\": \"cloudflare.com\", \"excludeExpired\": true, \"maxResults\": 10}'",
          "Python": "import httpx\n\n# Primary Synchronous Endpoint (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\nurl = \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\"\npayload = {\n    \"rootDomain\": \"cloudflare.com\",\n    \"excludeExpired\": true,\n    \"maxResults\": 10\n}\nheaders = {\n    \"Content-Type\": \"application/json\",\n    \"X-RapidAPI-Host\": \"b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\",\n    \"X-RapidAPI-Key\": \"<YOUR_RAPIDAPI_OR_ZYLA_KEY>\",\n}\n\nwith httpx.Client(timeout=30.0) as client:\n    response = client.post(url, json=payload, headers=headers)\n    response.raise_for_status()\n    print(response.json())\n",
          "Node.js": "// Primary Synchronous Endpoint (Gateway Route: https://b2b-quant-rapidapi-gateway.jesleytassili.workers.dev/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor)\nconst url = \"https://b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/run-sync-get-dataset-items\";\nconst options = {\n  method: \"POST\",\n  headers: {\n    \"Content-Type\": \"application/json\",\n    \"X-RapidAPI-Host\": \"b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor.p.rapidapi.com\",\n    \"X-RapidAPI-Key\": \"<YOUR_RAPIDAPI_OR_ZYLA_KEY>\"\n  },\n  body: JSON.stringify({\"rootDomain\": \"cloudflare.com\", \"excludeExpired\": true, \"maxResults\": 10})\n};\n\nconst response = await fetch(url, options);\nconst data = await response.json();\nconsole.log(data);\n"
        },
        "x-backend-secret-header": {
          "name": "Authorization",
          "value": "Bearer <APIFY_API_TOKEN>",
          "visibleToSubscriber": false
        },
        "requestBody": {
          "required": true,
          "description": "Structured JSON parameters for `b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor`.",
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/B2bSslTlsCtLogSubdomainAttackSurfaceAuditorRequest"
              },
              "example": {
                "rootDomain": "cloudflare.com",
                "excludeExpired": true,
                "maxResults": 10
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Successful synchronous execution of `b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor` returning enriched B2B JSON records.",
            "headers": {
              "X-RateLimit-Remaining": {
                "description": "Remaining requests in the subscriber's monthly plan quota (BASIC=15, PRO=1000, ULTRA=5000, MEGA=25000).",
                "schema": {
                  "type": "integer",
                  "example": 999
                }
              },
              "X-Engine-Version": {
                "description": "Deterministic B2B engine release version.",
                "schema": {
                  "type": "string",
                  "example": "3.0.0"
                }
              }
            },
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/B2bSslTlsCtLogSubdomainAttackSurfaceAuditorResponseEnvelope"
                },
                "example": {
                  "status": "succeeded",
                  "actor": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
                  "engineVersion": "3.0.0",
                  "count": 1,
                  "data": [
                    {
                      "certificateId": "30076179807",
                      "rootDomain": "cloud.com",
                      "subdomain": "verify.cloud.com",
                      "commonName": "verify.cloud.com",
                      "issuerName": "Let's Encrypt",
                      "notBefore": "2026-10-12",
                      "notAfter": "2027-01-10",
                      "isWildcard": false,
                      "shadowItExposure": "STANDARD_PRODUCTION",
                      "attackSurfaceRiskScore": 63,
                      "markdownSecOpsBrief": "# B2B SSL/TLS CT LOG & ATTACK SURFACE RECON BRIEF: verify.cloud.com\n\n## 1. Subdomain & X.509 Certificate Identity\n- **CT Certificate ID:** `30076179807`\n- **Corporate Root Domain:** `cloud.com`\n- **Discovered Subdomain / SAN:** **`verify.cloud.com`**\n- **Common Name (CN):** `verify.cloud.com`\n- **Issuing Certificate Authority:** Let's Encrypt\n\n## 2. EASM Exposure Classification & Validity\n- **Attack Surface Risk Score:** **63/100**\n- **Exposure Classification:** **`STANDARD_PRODUCTION`**\n- **Wildcard Scope (`*.domain`):** `False`\n- **Valid From (`notBefore`):** `2026-10-12`\n- **Expires On (`notAfter`):** `2027-01-10`"
                    }
                  ]
                }
              }
            }
          },
          "201": {
            "description": "Synchronous dataset created and returned for `b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor` on Apify Cloud (`HTTP 201`).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/B2bSslTlsCtLogSubdomainAttackSurfaceAuditorResponseEnvelope"
                },
                "example": {
                  "status": "succeeded",
                  "actor": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
                  "engineVersion": "3.0.0",
                  "count": 1,
                  "data": [
                    {
                      "certificateId": "30076179807",
                      "rootDomain": "cloud.com",
                      "subdomain": "verify.cloud.com",
                      "commonName": "verify.cloud.com",
                      "issuerName": "Let's Encrypt",
                      "notBefore": "2026-10-12",
                      "notAfter": "2027-01-10",
                      "isWildcard": false,
                      "shadowItExposure": "STANDARD_PRODUCTION",
                      "attackSurfaceRiskScore": 63,
                      "markdownSecOpsBrief": "# B2B SSL/TLS CT LOG & ATTACK SURFACE RECON BRIEF: verify.cloud.com\n\n## 1. Subdomain & X.509 Certificate Identity\n- **CT Certificate ID:** `30076179807`\n- **Corporate Root Domain:** `cloud.com`\n- **Discovered Subdomain / SAN:** **`verify.cloud.com`**\n- **Common Name (CN):** `verify.cloud.com`\n- **Issuing Certificate Authority:** Let's Encrypt\n\n## 2. EASM Exposure Classification & Validity\n- **Attack Surface Risk Score:** **63/100**\n- **Exposure Classification:** **`STANDARD_PRODUCTION`**\n- **Wildcard Scope (`*.domain`):** `False`\n- **Valid From (`notBefore`):** `2026-10-12`\n- **Expires On (`notAfter`):** `2027-01-10`"
                    }
                  ]
                }
              }
            }
          },
          "400": {
            "description": "Bad Request — Invalid JSON payload or schema validation error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                },
                "example": {
                  "status": "error",
                  "code": 400,
                  "message": "Invalid JSON request body."
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — Missing or invalid `X-RapidAPI-Proxy-Secret` / `X-Zyla-Proxy-Secret` header (Anti-Bypass Protection).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                },
                "example": {
                  "status": "forbidden",
                  "code": 403,
                  "message": "Direct access denied. Requests must originate from RapidAPI Hub or Zyla API Hub with a valid Proxy-Secret."
                }
              }
            }
          },
          "429": {
            "description": "Too Many Requests — Monthly plan quota exceeded (e.g., BASIC Freemium 15 req/month hard limit).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                },
                "example": {
                  "status": "quota_exceeded",
                  "code": 429,
                  "message": "Monthly request quota exceeded for BASIC plan (15 req/month hard limit). Upgrade to PRO ($19/mo), ULTRA ($49/mo), or MEGA ($149/mo)."
                }
              }
            }
          }
        }
      }
    },
    "/v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/health": {
      "get": {
        "operationId": "health_b2b_ssl_tls_ct_log_subdomain_attack_surface_auditor",
        "summary": "Health & SLA Check for B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor",
        "description": "Immediate `HTTP 200` status and metadata health check for `b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor` on RapidAPI Studio and Zyla API Hub (`GET https://api.apify.com/v2/acts/b2b-quant-apis~b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor` and `GET /v1/b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor/health`) without starting a container build or run.",
        "tags": [
          "Cybersecurity"
        ],
        "responses": {
          "200": {
            "description": "Engine online and ready (`HTTP 200 JSON`).",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "status": {
                      "type": "string",
                      "example": "ok"
                    },
                    "actor": {
                      "type": "string",
                      "example": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor"
                    },
                    "engineVersion": {
                      "type": "string",
                      "example": "3.0.0"
                    },
                    "category": {
                      "type": "string",
                      "example": "Cybersecurity"
                    },
                    "data": {
                      "type": "object",
                      "additionalProperties": true,
                      "example": {
                        "name": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
                        "username": "b2b-quant-apis",
                        "isPublic": true
                      }
                    }
                  }
                },
                "example": {
                  "status": "ok",
                  "actor": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
                  "engineVersion": "3.0.0",
                  "category": "Cybersecurity",
                  "data": {
                    "name": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
                    "username": "b2b-quant-apis",
                    "isPublic": true
                  }
                }
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "securitySchemes": {
      "ApifyCloudBearerAuth": {
        "type": "http",
        "scheme": "bearer",
        "bearerFormat": "APIFY_API_TOKEN",
        "description": "Backend Secret Header (`Authorization: Bearer <APIFY_API_TOKEN>`) injected invisibly by RapidAPI Studio and Zyla API Hub proxy when calling https://api.apify.com."
      },
      "RapidAPIProxySecret": {
        "type": "apiKey",
        "in": "header",
        "name": "X-RapidAPI-Proxy-Secret",
        "description": "RapidAPI Hub shared proxy secret verified in constant time via hmac.compare_digest."
      },
      "ZylaProxySecret": {
        "type": "apiKey",
        "in": "header",
        "name": "X-Zyla-Proxy-Secret",
        "description": "Zyla API Hub shared proxy secret verified in constant time via hmac.compare_digest."
      },
      "RapidAPISubscriberKey": {
        "type": "apiKey",
        "in": "header",
        "name": "X-RapidAPI-Key",
        "description": "Subscriber API Key injected by RapidAPI Hub or Zyla API Hub."
      }
    },
    "schemas": {
      "B2bSslTlsCtLogSubdomainAttackSurfaceAuditorRequest": {
        "type": "object",
        "title": "B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor Request Schema",
        "description": "Configure corporate root domain, optional expired certificate filter, and maximum Certificate Transparency subdomain records to audit.",
        "properties": {
          "rootDomain": {
            "type": "string",
            "title": "Corporate Root Domain",
            "description": "Target corporate domain for External Attack Surface Management (EASM) reconnaissance (e.g., 'apify.com', 'stripe.com', 'cloudflare.com').",
            "default": "apify.com",
            "example": "cloudflare.com"
          },
          "excludeExpired": {
            "type": "boolean",
            "title": "Exclude Expired Certificates",
            "description": "If true, filters strictly for active/non-expired SSL/TLS certificates in Certificate Transparency logs.",
            "default": true,
            "example": true
          },
          "maxResults": {
            "type": "integer",
            "title": "Maximum Subdomain Certificates",
            "description": "Maximum number of CT log subdomain certificates to extract and score (1 to 100).",
            "default": 15,
            "minimum": 1,
            "maximum": 100,
            "example": 10
          }
        },
        "required": [
          "rootDomain"
        ],
        "example": {
          "rootDomain": "cloudflare.com",
          "excludeExpired": true,
          "maxResults": 10
        }
      },
      "B2bSslTlsCtLogSubdomainAttackSurfaceAuditorRecord": {
        "type": "object",
        "title": "B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor Output Record",
        "description": "Enriched B2B dataset item returned by `b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor`.",
        "properties": {
          "certificateId": {
            "type": "string",
            "title": "CT Log Certificate ID",
            "description": "Public Certificate Transparency (CT) log entry ID.",
            "example": "30076179807"
          },
          "rootDomain": {
            "type": "string",
            "title": "Corporate Root Domain",
            "description": "Audited parent domain.",
            "example": "cloud.com"
          },
          "subdomain": {
            "type": "string",
            "title": "Discovered Subdomain / SAN",
            "description": "Subject Alternative Name (SAN) or subdomain discovered in CT logs.",
            "example": "verify.cloud.com"
          },
          "commonName": {
            "type": "string",
            "title": "Certificate Common Name (CN)",
            "description": "Primary X.509 Common Name.",
            "example": "verify.cloud.com"
          },
          "issuerName": {
            "type": "string",
            "title": "Certificate Authority (CA)",
            "description": "Issuing Certificate Authority organization.",
            "example": "Let's Encrypt"
          },
          "notBefore": {
            "type": "string",
            "title": "Valid Not Before",
            "description": "ISO date when certificate validity begins.",
            "example": "2026-10-12"
          },
          "notAfter": {
            "type": "string",
            "title": "Valid Not After (Expiry)",
            "description": "ISO date when certificate expires.",
            "example": "2027-01-10"
          },
          "isWildcard": {
            "type": "boolean",
            "title": "Is Wildcard Certificate",
            "description": "True if the certificate covers *.domain wildcard scope.",
            "example": false
          },
          "shadowItExposure": {
            "type": "string",
            "title": "Shadow IT / Environment Classification",
            "description": "HIGH_RISK_DEV_STAGING_ADMIN, WILDCARD_BROAD_SCOPE, or STANDARD_PRODUCTION.",
            "example": "STANDARD_PRODUCTION"
          },
          "attackSurfaceRiskScore": {
            "type": "integer",
            "title": "Attack Surface Risk Score (0-100)",
            "description": "Quantitative EASM & SecOps exposure score (0-100).",
            "example": 63
          },
          "markdownSecOpsBrief": {
            "type": "string",
            "title": "Markdown EASM & SecOps Recon Brief",
            "description": "Executive Markdown advisory for SOC teams, MSSPs, and automated EASM workflows.",
            "example": "# B2B SSL/TLS CT LOG & ATTACK SURFACE RECON BRIEF: verify.cloud.com\n\n## 1. Subdomain & X.509 Certificate Identity\n- **CT Certificate ID:** `30076179807`\n- **Corporate Root Domain:** `cloud.com`\n- **Discovered Subdomain / SAN:** **`verify.cloud.com`**\n- **Common Name (CN):** `verify.cloud.com`\n- **Issuing Certificate Authority:** Let's Encrypt\n\n## 2. EASM Exposure Classification & Validity\n- **Attack Surface Risk Score:** **63/100**\n- **Exposure Classification:** **`STANDARD_PRODUCTION`**\n- **Wildcard Scope (`*.domain`):** `False`\n- **Valid From (`notBefore`):** `2026-10-12`\n- **Expires On (`notAfter`):** `2027-01-10`"
          }
        },
        "example": {
          "certificateId": "30076179807",
          "rootDomain": "cloud.com",
          "subdomain": "verify.cloud.com",
          "commonName": "verify.cloud.com",
          "issuerName": "Let's Encrypt",
          "notBefore": "2026-10-12",
          "notAfter": "2027-01-10",
          "isWildcard": false,
          "shadowItExposure": "STANDARD_PRODUCTION",
          "attackSurfaceRiskScore": 63,
          "markdownSecOpsBrief": "# B2B SSL/TLS CT LOG & ATTACK SURFACE RECON BRIEF: verify.cloud.com\n\n## 1. Subdomain & X.509 Certificate Identity\n- **CT Certificate ID:** `30076179807`\n- **Corporate Root Domain:** `cloud.com`\n- **Discovered Subdomain / SAN:** **`verify.cloud.com`**\n- **Common Name (CN):** `verify.cloud.com`\n- **Issuing Certificate Authority:** Let's Encrypt\n\n## 2. EASM Exposure Classification & Validity\n- **Attack Surface Risk Score:** **63/100**\n- **Exposure Classification:** **`STANDARD_PRODUCTION`**\n- **Wildcard Scope (`*.domain`):** `False`\n- **Valid From (`notBefore`):** `2026-10-12`\n- **Expires On (`notAfter`):** `2027-01-10`"
        }
      },
      "B2bSslTlsCtLogSubdomainAttackSurfaceAuditorResponseEnvelope": {
        "type": "object",
        "title": "B2B SSL/TLS CT Log & Subdomain Attack Surface Recon Auditor Synchronous Response Envelope",
        "required": [
          "status",
          "actor",
          "count",
          "data"
        ],
        "properties": {
          "status": {
            "type": "string",
            "example": "succeeded"
          },
          "actor": {
            "type": "string",
            "example": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor"
          },
          "marketplace": {
            "type": "string",
            "example": "rapidapi_zyla_hub"
          },
          "engineVersion": {
            "type": "string",
            "example": "3.0.0"
          },
          "count": {
            "type": "integer",
            "example": 1
          },
          "data": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/B2bSslTlsCtLogSubdomainAttackSurfaceAuditorRecord"
            }
          }
        },
        "example": {
          "status": "succeeded",
          "actor": "b2b-ssl-tls-ct-log-subdomain-attack-surface-auditor",
          "engineVersion": "3.0.0",
          "count": 1,
          "data": [
            {
              "certificateId": "30076179807",
              "rootDomain": "cloud.com",
              "subdomain": "verify.cloud.com",
              "commonName": "verify.cloud.com",
              "issuerName": "Let's Encrypt",
              "notBefore": "2026-10-12",
              "notAfter": "2027-01-10",
              "isWildcard": false,
              "shadowItExposure": "STANDARD_PRODUCTION",
              "attackSurfaceRiskScore": 63,
              "markdownSecOpsBrief": "# B2B SSL/TLS CT LOG & ATTACK SURFACE RECON BRIEF: verify.cloud.com\n\n## 1. Subdomain & X.509 Certificate Identity\n- **CT Certificate ID:** `30076179807`\n- **Corporate Root Domain:** `cloud.com`\n- **Discovered Subdomain / SAN:** **`verify.cloud.com`**\n- **Common Name (CN):** `verify.cloud.com`\n- **Issuing Certificate Authority:** Let's Encrypt\n\n## 2. EASM Exposure Classification & Validity\n- **Attack Surface Risk Score:** **63/100**\n- **Exposure Classification:** **`STANDARD_PRODUCTION`**\n- **Wildcard Scope (`*.domain`):** `False`\n- **Valid From (`notBefore`):** `2026-10-12`\n- **Expires On (`notAfter`):** `2027-01-10`"
            }
          ]
        }
      },
      "ErrorResponse": {
        "type": "object",
        "required": [
          "status",
          "code",
          "message"
        ],
        "properties": {
          "status": {
            "type": "string",
            "example": "error"
          },
          "code": {
            "type": "integer",
            "example": 403
          },
          "message": {
            "type": "string",
            "example": "Direct access denied."
          }
        }
      }
    }
  }
}