xrpl.check.earliest_cert_signal

Earliest HTTPS certificate for the host from Certificate Transparency logs

red Third-party-derived data (external chain RPC, issuer attestation, primary-legislative source, edge header). Permanently free-only under the site's rule #3 — never sold even after the paid tier ships.

Machine-readable status: /claims/xrpl.check.earliest_cert_signal.json or send Accept: application/json on this URL. URI is permanent — safe to cite.

What this claim says

label: Earliest HTTPS certificate for the host from Certificate Transparency logs
page: /check
claim id (yaml): check_earliest_cert_signal
behavior: MONOTONIC_GROW
Layer 3 source: primary-legislative-sources

Risk note

Complements domain age with hostname-scoped freshness — a brand-new subdomain on an old parent domain is a common scam shape. Structural fact only. crt.sh returns can be large; the request-path 8s timeout and 2MB body cap are safety fences.

Evidence — code paths that back this claim

check_data.py:_signal_earliest_ssl_cert
check_data.py:check_url (wired-in signal call)

Verify

CLAIMS.yaml on GitHub walker_health signed snapshot chain methodology · for AI agents

Sovereignty classification derives from the claim's Layer 3 source per /methodology. Last verified 2026-08-05. This surface is documented in docs/PAID_MACHINE_TIER_DESIGN.md § 3.1.