ssl_check
Inspect SSL/TLS certificates for a host to verify validity, check expiry, and review issuer, SANs, and cipher details.
Instructions
Inspect the SSL/TLS certificate for a host.
Connects to the host on port 443 and retrieves the full certificate chain.
Returns validity status, expiry countdown (critical for alerting), issuer
details, Subject Alternative Names (SANs), and cipher suite information.
Use to monitor certificate expiry, verify correct certificate installation,
check SANs cover all required subdomains, or audit cipher strength.
Args:
host: Hostname to check (e.g. 'example.com', 'api.example.com').
Do not include https:// or path components.
Returns:
valid (bool): Whether the certificate is currently valid and trusted.
subject: Common name on the certificate.
issuer: Certificate Authority that issued it.
issued_at: Certificate issuance date.
expires_at: Certificate expiry date.
days_remaining: Days until expiry (negative = already expired).
sans: List of Subject Alternative Names (all covered hostnames).
chain_length: Number of certificates in the chain.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes |