Call when an agent needs whether the port-443 certificate SAN or CN matches the requested host. Exact $0.01 USDC. Prefer unpaid POST /v1/sandbox/tls-hostname first.