ssl-certificate-checker

Inspect SSL/TLS certificates on remote hosts using openssl s_client.

Updated Feb 14, 2026
One-click install
npx skills add https://github.com/mcyork/skillseal-demo-sslcheck --skill ssl-certificate-checker
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ssl-certificate-checker
Source: https://github.com/mcyork/skillseal-demo-sslcheck/tree/main
Command: npx skills add https://github.com/mcyork/skillseal-demo-sslcheck --skill ssl-certificate-checker

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you understand the security and validity of SSL/TLS certificates on remote hosts, preventing potential security risks and ensuring secure connections.

Core Features & Use Cases

  • Certificate Inspection: Retrieves and analyzes SSL/TLS certificate details including validity, expiry, issuer, and subject.
  • Chain of Trust Verification: Checks if the certificate chain is trusted by the system's CA bundle.
  • Use Case: Before connecting to a sensitive financial service, use this Skill to verify its SSL certificate is valid, not expired, and issued by a trusted authority.

Quick Start

Check the SSL certificate for example.com.

Frequently Asked Questions about ssl-certificate-checker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check an SSL certificate on a remote host?

To check an SSL certificate, this Skill uses openssl s_client to retrieve and analyze certificate details including validity, expiry, issuer, subject, and chain of trust status for remote hosts.

Can I inspect SSL certificates using STARTTLS protocols?

Yes, you can inspect SSL certificates using STARTTLS protocols. The Skill supports both direct TLS and STARTTLS connections, allowing you to evaluate certificate validity and chain of trust across different protocol setups.

How do I verify the chain of trust for a TLS certificate?

To verify the chain of trust for a TLS certificate, the Skill checks if the certificate chain is trusted by the system's CA bundle. This ensures the connection is secured by a trusted authority rather than a self-signed certificate.

What happens when inspecting a self-signed SSL certificate?

When inspecting a self-signed SSL certificate, the Skill applies robust error handling to manage the connection. It identifies that the certificate is not trusted by the system's CA bundle and reports the chain of trust status accordingly.

Does the SSL certificate checker show Subject Alternative Names (SANs)?

Yes, the SSL certificate checker shows Subject Alternative Names (SANs) along with the certificate's issuer, subject, validity, and expiry. This provides a comprehensive view of the domains covered by the TLS certificate.

Why do I need to inspect SSL certificates before connecting to a service?

You need to inspect SSL certificates before connecting to a service to prevent potential security risks. Verifying validity, expiry, and trusted issuance ensures your connection to sensitive services like financial platforms remains secure.