SSL/TLS Certificate Inspector
ssl_certificateRetrieve and analyze the TLS certificate served by a host: issuer, subject, validity period, days until expiry, SANs, serial, and SHA-256 fingerprint. Identifies expired or soon-to-expire certificates.
Instructions
Inspect the TLS certificate served by a host: issuer, subject, validity window, days-until-expiry, SANs, serial and SHA-256 fingerprint. Flags expired or soon-to-expire certificates.
Args:
domain (string): host to connect to.
port (number): TLS port (default 443).
response_format ('markdown' | 'json'): output format (default 'markdown').
Returns: certificate fields plus { days_until_expiry, expired, expires_soon }.
Example: "When does github.com's certificate expire?" -> ssl_certificate(domain="github.com"). Errors: returns an error if the host is unreachable or serves no certificate.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain (or host) to inspect, e.g. 'example.com'. | |
| port | No | TLS port (default 443). | |
| response_format | No | Output format: 'markdown' for a human-readable summary (default) or 'json' for the full structured payload. | markdown |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | ||
| port | Yes | ||
| subject_common_name | No | ||
| subject_alt_names | Yes | ||
| issuer_organization | No | ||
| issuer_common_name | No | ||
| valid_from | No | ||
| valid_to | No | ||
| days_until_expiry | No | ||
| expired | Yes | ||
| expires_soon | Yes | ||
| serial_number | No | ||
| fingerprint_sha256 | No |