ssl-certificate

Detect SSL/TLS certificate expiry and chain validity for a host.

39|6|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/vladkesler/initrunner --skill ssl-certificate
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ssl-certificate
Source: https://github.com/vladkesler/initrunner/tree/main/examples/roles/api-monitor/skills/ssl-certificate
Command: npx skills add https://github.com/vladkesler/initrunner --skill ssl-certificate

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SSL/TLS certificates can expire or be misconfigured, leading to service outages or trust issues. This skill provides proactive checks for expiry and chain validity to prevent outages.

Core Features & Use Cases

  • Expiry monitoring: Detect certificates nearing expiry and trigger alerts.
  • Chain and hostname validation: Verify certificate chain integrity and hostname matches.
  • Use Case: Regularly audit endpoints in production to ensure TLS health and trusted issuers.

Quick Start

Check a host's SSL certificate expiry and issuer to ensure timely renewals and secure connections.

Frequently Asked Questions about ssl-certificate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I monitor SSL certificate expiry for multiple production endpoints?

You can monitor SSL certificate expiry by applying a maintenance check to detect certificates nearing their expiration date. This prevents service outages by triggering alerts for timely renewals across your production endpoints.

How does SSL chain validity verification work for a specific host?

SSL chain validity verification parses certificate data with openssl to check the integrity of the certificate chain. It ensures the hostname matches and validates the trusted issuer to prevent trust issues.

Can I use openssl to check TLS certificate issuer and hostname validity?

Yes, you can use openssl to parse certificate data and perform TLS certificate issuer and hostname verification. The skill requires openssl to detect misconfigurations and validate the chain trust.

Do I need openssl to perform automated SSL certificate checks?

Yes, openssl is required to parse certificate data and perform automated SSL certificate checks. It supports hostname verification and issuer checks to ensure your TLS connections remain secure.

How do I prevent redundant SSL certificate checks across different hosts?

You can prevent redundant SSL certificate checks by storing results under the 'ssl_check' category. This deduplicates ongoing monitoring efforts across multiple endpoints during regular audits.

What is the best way to audit TLS health and trusted issuers in production?

The best way to audit TLS health is to regularly check certificate expiry and chain validity. This verifies certificate chain integrity, hostname matches, and trusted issuers to ensure ongoing secure connections.