/*
$a = file_get_contents("https://api.telegram.org/bot" . API_KEY . "/setwebhook?url=" . $_SERVER['SERVER_NAME'] . $_SERVER['SCRIPT_NAME']);
echo $a;
*/

<?php
header("Content-Type: application/json; charset=utf-8");
error_reporting(0);

if (!isset($_GET['domen'])) {
    error("domen parametri yo‘q");
}

$domain = trim($_GET['domen']);

$context = stream_context_create([
    "ssl" => [
        "capture_peer_cert" => true,
        "verify_peer" => false,
        "verify_peer_name" => false,
        "allow_self_signed" => true
    ]
]);

$client = @stream_socket_client(
    "ssl://" . $domain . ":443",
    $errno,
    $errstr,
    20,
    STREAM_CLIENT_CONNECT,
    $context
);

if (!$client) {
    error("Ulanib bo‘lmadi: $errstr ($errno)");
}

$params = stream_context_get_params($client);

if (!isset($params["options"]["ssl"]["peer_certificate"])) {
    error("SSL sertifikat topilmadi");
}

$certResource = $params["options"]["ssl"]["peer_certificate"];
$cert = openssl_x509_parse($certResource);

$pubKey = openssl_pkey_get_public($certResource);
$pubKeyDetails = openssl_pkey_get_details($pubKey);

$fingerprint_sha1 = openssl_x509_fingerprint($certResource, "sha1");
$fingerprint_sha256 = openssl_x509_fingerprint($certResource, "sha256");

$now = time();
$validFrom = $cert["validFrom_time_t"];
$validTo   = $cert["validTo_time_t"];
$daysLeft  = floor(($validTo - $now) / 86400);

$isCA = false;
if (isset($cert["extensions"]["basicConstraints"])) {
    if (strpos($cert["extensions"]["basicConstraints"], "CA:TRUE") !== false) {
        $isCA = true;
    }
}

$selfSigned = ($cert["issuer"] == $cert["subject"]);

$response = [
    "success" => true,
    "domain" => $domain,
    "dev" => "https://t.me/axwze",
    "validity" => [
        "from" => date("Y-m-d H:i:s", $validFrom),
        "to"   => date("Y-m-d H:i:s", $validTo),
        "days_left" => $daysLeft,
        "expired" => $validTo < $now
    ],
    "subject" => $cert["subject"],
    "issuer"  => $cert["issuer"],
    "serial" => [
        "hex" => isset($cert["serialNumberHex"]) ? $cert["serialNumberHex"] : null,
        "dec" => isset($cert["serialNumber"]) ? $cert["serialNumber"] : null
    ],
    "version" => $cert["version"],
    "signature_algorithm" => $cert["signatureTypeSN"],
    "public_key" => [
        "type" => isset($pubKeyDetails["type"]) ? $pubKeyDetails["type"] : null,
        "bits" => isset($pubKeyDetails["bits"]) ? $pubKeyDetails["bits"] : null,
    ],
    "fingerprints" => [
        "sha1" => $fingerprint_sha1,
        "sha256" => $fingerprint_sha256
    ],
    "extensions" => isset($cert["extensions"]) ? $cert["extensions"] : null,
    "is_ca" => $isCA,
    "self_signed" => $selfSigned
];

echo json_encode($response, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);


function error($msg) {
    echo json_encode([
        "success" => false,
        "error" => $msg,
        "dev" => "https://t.me/axwze"
    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
    exit;
}
?>