SSL Certificate Check
ssl_checkRead-onlyIdempotent
Inspect a host's served TLS/SSL certificate and connection: expiry date, issuer, SAN list, chain integrity, revocation (OCSP, then CRL; unknown when neither answers — not graded unless revoked), TLS version, and HSTS, returning an A+ to F grade weighted by certificate validity (40%), TLS version (25%), chain trust (15%), and HSTS (20%). Use this to diagnose certificate or HTTPS-handshake problems for one host. Use http_security instead to audit response security headers, or security_scan for an all-in-one domain report. Read-only: it completes a TLS handshake but sends no application data; requires no API key; rate-limited. Returns a text report: grade, expiry/issuer KPIs, issues, and actions.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Hostname to inspect, without scheme (e.g., 'example.com'). The host portion of a pasted URL is also accepted. | |
| port | No | TCP port for the TLS handshake. Defaults to 443 (standard HTTPS); set this only for a non-standard HTTPS port such as 8443. |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kpis | No | Key metrics as label/value pairs | |
| grade | No | Letter grade (A+ to F) when the tool grades the target | |
| score | No | 0-100 score when the tool scores the target | |
| issues | No | Detected problems, severity-rated | |
| status | Yes | Overall verdict, e.g. 'good' | 'warning' | 'bad' | 'info' | 'unknown' | |
| actions | No | Recommended next actions, most important first | |
| summary | No | One-paragraph interpretation of the result | |
| reportUrl | Yes | Human-facing interactive report for this exact lookup on dechonet.com |